| शीर्षक | Tenda Tenda Multiple IP Cameras Multiple Versions Hard-coded Credentials |
|---|
| विवरण | Affected Version
Tenda smart camera firmware based on the ZhiLing/Kylin OEM solution, including the following verified product series and versions:
CH series: CH10, CH7, CH7G
CP series: CP3, CP3 Pro, CP7
TC3 series: TC3B14C, TC3B15C, TC3T14C, TC3T15C
Verified firmware versions include V21.x, V22.x, V25.x, V26.x and V27.x branches. Other Tenda smart camera firmware versions using the same ZhiLing/Kylin OEM implementation may also be affected.
Vulnerability Description
A hard-coded SSH root password vulnerability exists in Tenda smart camera firmware. The firmware contains a hard-coded root password hash, and the same SSH debug password is reused across affected firmware versions. When an attacker obtains web administrator access, the attacker can enable the SSH debugging function and log in to the device as root using the hard-coded credential, resulting in privilege escalation from web administrator to system administrator. |
|---|
| स्रोत | ⚠️ https://github.com/howitouchyou/Tenda-Smart-Camera-Vulnerability/tree/main/Tenda%20Camera%20SSH%20Hard-coded%20Password |
|---|
| उपयोगकर्ता | Howitouchyou (UID 99230) |
|---|
| सबमिशन | 25/06/2026 05:30 AM (2 महीनों पहले) |
|---|
| संयम | 13/08/2026 04:39 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 389501 [Tenda CH/CP/TX3 तक V27.x SSH कमजोर प्रमाणीकरण] |
|---|
| अंक | 20 |
|---|