| 标题 | Tenda Tenda Wi-Fi 5 Router AC10 AC10V4.0si_V16.03.10.13 Hard-coded Credentials |
|---|
| 描述 | A hard-coded credentials vulnerability was identified in the Tenda Wi-Fi 5 Router AC10 device running firmware version AC10V4.0si_V16.03.10.13. The root user account uses a hard-coded password (cracked as "Fireitup" using the John tool). This password is stored in the file /etc_ro/shadow using MD5-crypt hashing.The vulnerability was discovered by analyzing the firmware (US_AC10V4.0si_V16.03.10.13_cn_TDC01.bin). The file was extracted from the squashfs-root directory, and the MD5-crypt hash of the root user's password was cracked using John, resulting in the password "Fireitup". The cracked password allows attackers to log in to the router's system with root privileges.For instance, it allows unauthorized root access to the device through network-accessible services or the administrative interface. |
|---|
| 用户 | lxyilu (UID 88936) |
|---|
| 提交 | 2025-08-13 10時10分 (1 年前) |
|---|
| 管理 | 2025-08-21 08時06分 (8 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 320914 [Tenda AC10 16.03.10.13 MD5 Hash /etc_ro/shadow 弱身份验证] |
|---|
| 积分 | 20 |
|---|