| عنوان | Tenda AC10 V4.0 V16.03.10.09_multi_TDE01 Improper Authentication |
|---|
| الوصف | A vulnerability classified as critical was found in Tenda AC10 V4.0 (firmware US_AC10V4.0si_V16.03.10.09_multi_TDE01). The vulnerability exists in R7WebsSecurityHandler of the httpd binary, which is registered as the first-priority URL handler for all requests to the web management interface. Two whitelist checks in this function invoke strstr() against the raw request URL including the query string, while all other authentication logic operates on the stripped URL. Appending a whitelisted string such as "reasy-ui-1.0.3.js" as a query parameter causes the handler to return early without performing credential verification. The attack is remotely exploitable without authentication or user interaction, granting access to all protected endpoints including configuration download, firmware upload, and all administrative handlers. The vulnerability has been confirmed on physical hardware and responsibly disclosed to the vendor. |
|---|
| المصدر | ⚠️ https://github.com/teiwiet/tenda-ac10-vulnerabilities/blob/main/authen-bypass-tenda-ac10.md |
|---|
| المستخدم | teiwiet (UID 98971) |
|---|
| ارسال | 27/06/2026 12:01 PM (2 أشهر منذ) |
|---|
| الاعتدال | 15/08/2026 07:25 AM (2 months later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 390174 [Tenda AC10 16.03.10.09_multi_TDE01 httpd R7WebsSecurityHandler توثيق ضعيف] |
|---|
| النقاط | 20 |
|---|