Description
A weakness has been identified in Tenda 4G03 Pro 1.0/1.0re/01.bin/04.03.01.53. Affected by this issue is some unknown functionality of the file /etc/www/pem/server.key of the component ECDSA P-256 Private Key Handler. This manipulation causes use of hard-coded cryptographic key
. It is possible to initiate the attack remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenda | 4G03 Pro | 1.0, 1.0re, 01.bin, 04.03.01.53 | — |
References
- VDB-355280 | Tenda 4G03 Pro ECDSA P-256 Private Key server.key hard-coded key vdb-entry
- VDB-355280 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #782053 | Tenda 4G03 Pro V1.0 V04.03.01.53 Cryptographic Issues third-party-advisory
- https://www.tenda.com.cn/ product