Description
A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24_cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been made public and could be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenda | AX12 Pro V2 | 16.03.49.24_cn | — |
References
- VDB-343378 | Tenda AX12 Pro V2 Telnet Service hard-coded credentials vdb-entry
- VDB-343378 | CTI Indicators (IOB, IOC, TTP) signature permissions-required
- Submit #740766 | Tenda AX12 pro V2 V16.03.49.24_cn Hard-coded Credentials third-party-advisory
- https://github.com/QIU-DIE/CVE/issues/49 broken-link exploit issue-tracking
- https://www.tenda.com.cn/ product