CVE-2026-1610: Tenda AX12 Pro V2, заобикаляне на вход и права

Описание

Оригинално описание

A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24_cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been made public and could be used.

Засегнати продукти

• Tenda AX12 Pro V2: 16.03.49.24_cn

Вид слабост

• CWE-798 Use of Hard-coded Credentials
• CWE-259 Използване на твърдо кодирана парола

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-1610
• https://nvd.nist.gov/vuln/detail/CVE-2026-1610
• https://vuldb.com/?id.343378
• https://vuldb.com/?ctiid.343378
• https://vuldb.com/?submit.740766
• https://github.com/QIU-DIE/CVE/issues/49
• https://www.tenda.com.cn/