Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which allows attackers to steal all data such as source code and system files via a crafted GET request.
References
| Link | Resource |
|---|---|
| http://ac6ac1200.com | Permissions Required Product URL Repurposed |
| http://tenda.com | Not Applicable |
| https://drive.google.com/drive/folders/1VxR4lhaWNWLuAPdJK2aRF6zfo_mRyiFO?usp=sharing | Permissions Required Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
14 Feb 2024, 01:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://ac6ac1200.com - Permissions Required, Product, URL Repurposed |
06 Sep 2022, 18:43
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:tendacn:ac6:5.0:*:*:*:*:*:*:* cpe:2.3:o:tendacn:ac6_firmware:*:*:*:*:*:*:*:* |
|
| CWE | CWE-552 | |
| First Time |
Tendacn
Tendacn ac6 Firmware Tendacn ac6 |
|
| References | (MISC) http://ac6ac1200.com - Permissions Required, Product | |
| References | (MISC) http://tenda.com - Not Applicable | |
| References | (MISC) https://drive.google.com/drive/folders/1VxR4lhaWNWLuAPdJK2aRF6zfo_mRyiFO?usp=sharing - Permissions Required, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
30 Aug 2022, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-30 16:15
Updated : 2024-02-14 01:17
NVD link : CVE-2022-36552
Mitre link : CVE-2022-36552
CVE.ORG link : CVE-2022-36552
JSON object : View
Products Affected
tendacn
- ac6_firmware
- ac6
CWE
CWE-552
Files or Directories Accessible to External Parties