| शीर्षक | Tenda CP6 V11.10.00.243 CWE-327 Use of a Broken or Risky Cryptographic Algorithm |
|---|
| विवरण | During the firmware update process, additive checksum is used in function sub_2B7D04() of program uhttp to perform integrity verification on new firmware for update. This issue in the firmware update process of Tenda CP6(version V11.10.00.243) allows attackers to execute arbitrary code or cause denial of service via uploading a crafted firmware with the same additive checksum as the new firmware for update. |
|---|
| स्रोत | ⚠️ https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/CP6.md |
|---|
| उपयोगकर्ता | IOT_Res (UID 81722) |
|---|
| सबमिशन | 26/08/2025 03:51 AM (1 वर्ष पहले) |
|---|
| संयम | 02/09/2025 02:20 PM (7 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 322175 [Tenda CP6 11.10.00.243 uhttp sub_2B7D04 कमजोर एन्क्रिप्शन] |
|---|
| अंक | 20 |
|---|