An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted network request can lead to arbitrary code execution. An attacker can browse to the device to trigger this vulnerability.
The product implements an authentication technique, but it skips a step that weakens the technique.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ac6_firmware | Tenda | 02.03.01.110 (including) | 02.03.01.110 (including) |