A vulnerability, which was classified as critical, has been found in Tenda D820R ADSL2-2+ Modem (affected version not known). Affected by this issue is some unknown functionality of the component DNS. The manipulation with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is confidentiality, integrity, and availability.

The weakness was disclosed 01/19/2017 by Todor Donev as EDB-ID 41117 as not defined exploit (Exploit-DB). The advisory is available at exploit-db.com. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details are unknown but a public exploit is available. This vulnerability is assigned to T1068 by the MITRE ATT&CK project.

A public exploit has been developed by Todor Donev in Bash and been published immediately after the advisory. The exploit is available at exploit-db.com. It is declared as functional. The code used by the exploit is:

GET -e "http://$1/dnscfg.cgi?dnsPrimary=$2&dnsSecondary=$3&dnsDynamic=0&dnsRefresh=1" 0&> /dev/null <&1

Addressing this vulnerability is possible by firewalling .

The vulnerability is also documented in the vulnerability database at Exploit-DB (41117).

Productinfo

Vendor

• Tenda

Name

• D820R ADSL2-2+ Modem

License

• commercial

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion