CVE-2020-28094

On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...

CVE-2020-28094

On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...

CVE-2020-28093

On Tenda AC1200 Model AC6 15.03.06.51multi devices, admin, support, user, and nobody have a password of 1234...

CVE-2020-28093

On Tenda AC1200 Model AC6 15.03.06.51multi devices, admin, support, user, and nobody have a password of 1234...

Default configuration

On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...

Default credentials

On Tenda AC1200 Model AC6 15.03.06.51multi devices, admin, support, user, and nobody have a password of 1234...

CVE-2020-28094

On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...

CVE-2020-28094

CVE-2020-28094 affects the Tenda AC1200 (Model AC6) with firmware 15.03.06.51_multi. The root cause is that the default router speed-test settings contain links to download malware named elive or CNKI E-Learning, which could lead to malware download without user intent. According to NVD, the vuln...

CVE-2020-28093

CVE-2020-28093 affects Tenda AC1200 (Model AC6) with firmware 15.03.06.51_multi. The vulnerability is a default credentials disclosure where admin, support, user, and nobody share the password 1234, enabling login to manage the device. The connected records corroborate this description across mul...

CVE-2020-28093

On Tenda AC1200 Model AC6 15.03.06.51multi devices, admin, support, user, and nobody have a password of 1234...

Tenda AC1200 安全漏洞

The Tenda AC1200 is a wireless router from the Chinese company Tenda. A default credential disclosure vulnerability exists in the Tenda AC1200 Model AC6 15.03.06.51multi, which stems from the fact that admin, support, user, and nobody has a default password of 1234, which can be exploited by an...

Tenda AC1200 安全漏洞

The Tenda AC1200 is a wireless router from the Chinese company Tenda. A security vulnerability exists in Tenda AC1200 Model AC6 15.03.06.51multi devices, which originates from the default router speed test settings containing a malware download link named live or CNKI E-Learning. No details of th...

Binary Vulnerability in ASUS RT-AC5300, RT-AC1200

ASUS was established in June 2000, business scope: research and development, manufacturing of notebook computers, computer motherboards, medium-sized mainframe computers, high-end personal computers, servers and so on. A binary vulnerability exists in ASUS RT-AC5300, RT-AC1200, which can be...

CVE-2019-17137

CVE-2019-17137 affects NETGEAR AC1200 R6220 Smart WiFi Router (firmware 1.1.0.86). The root cause is in the processing of path strings: inserting a null byte can bypass most authentication checks, enabling network-adjacent attackers to bypass authentication. Documented exploit details come from Z...

(0Day) NETGEAR AC1200 mini_httpd Password Storage Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on vulnerable installations of NETGEAR AC1200 Smart WiFi Router. Authentication is required to exploit this vulnerability. The specific flaw exists within the storage of administrator credentials. The credentia...

(0Day) NETGEAR AC1200 mini_httpd Cleartext Transmission of Sensitive Information Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR AC1200 Smart WiFi Router. User interaction is required to exploit this vulnerability. The specific flaw exists within the handling of admin credentials provided to the...

CVE-2019-5072

An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS2 post...

CVE-2019-5071

An exploitable command injection vulnerability exists in the /goform/WanParameterSetting functionality of Tenda AC9 Router AC1200 Smart Dual-Band Gigabit WiFi Route AC9V1.0 Firmware V15.03.05.16multiTRU. A specially crafted HTTP POST request can cause a command injection in the DNS1 post...

CVE-2019-5072

The CVE-2019-5072 entry maps to a Tenda AC9 router vulnerability in /goform/WanParameterSetting that enables a local authenticated command-injection leading to code execution (root shell possible) via DNS2 post parameters. Talos reports CVSS 3.0/7.8 and confirms affected versions AC9V1.0 firmware...

NETGEAR AC1200 mini_httpd Poison Null Byte Authentication Bypass Vulnerability

The NETGEAR AC1200 is a wireless router from NETGEAR. A security vulnerability exists in the path string handling process in the NETGEAR AC1200. An attacker could exploit the vulnerability to bypass authentication on the system...