| タイトル | Tenda AC10 V4.0 V16.03.10.09_multi_TDE01 Improper Authentication |
|---|
| 説明 | A vulnerability classified as critical was found in Tenda AC10 V4.0 (firmware US_AC10V4.0si_V16.03.10.09_multi_TDE01). The vulnerability exists in R7WebsSecurityHandler of the httpd binary, which is registered as the first-priority URL handler for all requests to the web management interface. Two whitelist checks in this function invoke strstr() against the raw request URL including the query string, while all other authentication logic operates on the stripped URL. Appending a whitelisted string such as "reasy-ui-1.0.3.js" as a query parameter causes the handler to return early without performing credential verification. The attack is remotely exploitable without authentication or user interaction, granting access to all protected endpoints including configuration download, firmware upload, and all administrative handlers. The vulnerability has been confirmed on physical hardware and responsibly disclosed to the vendor. |
|---|
| ソース | ⚠️ https://github.com/teiwiet/tenda-ac10-vulnerabilities/blob/main/authen-bypass-tenda-ac10.md |
|---|
| ユーザー | teiwiet (UID 98971) |
|---|
| 送信 | 2026年06月27日 12:01 (2 月 ago) |
|---|
| モデレーション | 2026年08月15日 07:25 (2 months later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 390174 [Tenda AC10 16.03.10.09_multi_TDE01 httpd R7WebsSecurityHandler 弱い認証] |
|---|
| ポイント | 20 |
|---|