| 제목 | Tenda Tenda Wi-Fi 5 Router AC10 AC10V4.0si_V16.03.10.13 Hard-coded Credentials |
|---|
| 설명 | A hard-coded credentials vulnerability was identified in the Tenda Wi-Fi 5 Router AC10 device running firmware version AC10V4.0si_V16.03.10.13. The root user account uses a hard-coded password (cracked as "Fireitup" using the John tool). This password is stored in the file /etc_ro/shadow using MD5-crypt hashing.The vulnerability was discovered by analyzing the firmware (US_AC10V4.0si_V16.03.10.13_cn_TDC01.bin). The file was extracted from the squashfs-root directory, and the MD5-crypt hash of the root user's password was cracked using John, resulting in the password "Fireitup". The cracked password allows attackers to log in to the router's system with root privileges.For instance, it allows unauthorized root access to the device through network-accessible services or the administrative interface. |
|---|
| 사용자 | lxyilu (UID 88936) |
|---|
| 제출 | 2025. 08. 13. AM 10:10 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 08. 21. AM 08:06 (8 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 320914 [Tenda AC10 16.03.10.13 MD5 Hash /etc_ro/shadow 약한 인증] |
|---|
| 포인트들 | 20 |
|---|