Description
A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file force_upgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument current_force_upgrade_pwd can lead to use of hard-coded password. The attack can only be executed locally. The exploit has been published and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenda | RP3 Pro | 22.5.7.0, 22.5.7.1, 22.5.7.2, 22.5.7.3, 22.5.7.4, 22.5.7.5, 22.5.7.6, 22.5.7.7, 22.5.7.8, 22.5.7.9, 22.5.7.10, 22.5.7.11, 22.5.7.12, 22.5.7.13, 22.5.7.14, 22.5.7.15, 22.5.7.16, 22.5.7.17, 22.5.7.18, 22.5.7.19, 22.5.7.20, 22.5.7.21, 22.5.7.22, 22.5.7.23, 22.5.7.24, 22.5.7.25, 22.5.7.26, 22.5.7.27, 2… | — |
References
- VDB-328085 | Tenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password vdb-entry technical-description
- VDB-328085 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #673128 | Tenda RP3 Pro V22.5.7.93 CWE-287 Improper Authentication third-party-advisory
- https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/RP3.md exploit patch
- https://www.tenda.com.cn/ product