Description
A vulnerability has been found in Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to 65.10.15.6. Affected is an unknown function of the component Shadow File. Such manipulation with the input Fireitup leads to hard-coded credentials. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Tenda i24
1.0.0.35affected3.0.0.8(4008)affected04.03.01.49affected04.05.01.15affected04.08.01.28affected16.01.8.5affected65.10.15.6affected
Tenda 4G03 Pro
1.0.0.35affected3.0.0.8(4008)affected04.03.01.49affected04.05.01.15affected04.08.01.28affected16.01.8.5affected65.10.15.6affected
Tenda 4G05
1.0.0.35affected3.0.0.8(4008)affected04.03.01.49affected04.05.01.15affected04.08.01.28affected16.01.8.5affected65.10.15.6affected
Tenda 4G08
1.0.0.35affected3.0.0.8(4008)affected04.03.01.49affected04.05.01.15affected04.08.01.28affected16.01.8.5affected65.10.15.6affected
Tenda G0-8G-PoE
1.0.0.35affected3.0.0.8(4008)affected04.03.01.49affected04.05.01.15affected04.08.01.28affected16.01.8.5affected65.10.15.6affected
Tenda Nova MW5G
1.0.0.35affected3.0.0.8(4008)affected04.03.01.49affected04.05.01.15affected04.08.01.28affected16.01.8.5affected65.10.15.6affected
Tenda TEG5328F
1.0.0.35affected3.0.0.8(4008)affected04.03.01.49affected04.05.01.15affected04.08.01.28affected16.01.8.5affected65.10.15.6affected
References
- https://vuldb.com/?id.339075 ↗
- https://vuldb.com/?ctiid.339075 ↗
- https://vuldb.com/?submit.727155 ↗
- https://vuldb.com/?submit.727283 ↗
- https://vuldb.com/?submit.727284 ↗
- https://vuldb.com/?submit.727285 ↗
- https://vuldb.com/?submit.727302 ↗
- https://vuldb.com/?submit.727305 ↗
- https://vuldb.com/?submit.727306 ↗
- https://github.com/vuln-1/vuln/blob/main/Tenda/i24v3.0_V3.0.0.8/report-1.md ↗
- https://www.tenda.com.cn/ ↗