Description
A security flaw has been discovered in Tenda 4G03 Pro up to 1.0/1.1/04.03.01.53/192.168.0.1. Affected by this vulnerability is an unknown functionality of the file /bin/httpd. The manipulation results in improper access controls. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenda | 4G03 Pro | 1.0, 1.1, 04.03.01.0, 04.03.01.1, 04.03.01.2, 04.03.01.3, 04.03.01.4, 04.03.01.5, 04.03.01.6, 04.03.01.7, 04.03.01.8, 04.03.01.9, 04.03.01.10, 04.03.01.11, 04.03.01.12, 04.03.01.13, 04.03.01.14, 04.03.01.15, 04.03.01.16, 04.03.01.17, 04.03.01.18, 04.03.01.19, 04.03.01.20, 04.03.01.21, 04.03.01.22, … | — |
References
- VDB-355279 | Tenda 4G03 Pro httpd access control vdb-entry
- VDB-355279 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #782052 | Tenda Tenda 4G03 Pro V1.0 V04.03.01.53 Authentication Bypass Issues third-party-advisory
- https://www.tenda.com.cn/ product