Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r47c-pfw7-wg32

Опубликовано: 28 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate with network services on the device.

An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate with network services on the device.

EPSS

Процентиль: 22%
0.00073
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 5.3
nvd
5 месяцев назад

An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate with network services on the device.

CVSS3: 5.3
fstec
6 месяцев назад

Уязвимость микропрограммного обеспечения маршрутизаторов Tenda AC8, связанная с недостатками процедуры аутентификации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 22%
0.00073
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-287