Description (CNA)
A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file force_upgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument current_force_upgrade_pwd can lead to use of hard-coded password. The attack can only be executed locally. The exploit has been published and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Tenda / RP3 Pro | affected 22.5.7.0; affected 22.5.7.1; affected 22.5.7.2; affected 22.5.7.3; affected 22.5.7.4; affected 22.5.7.5; affected 22.5.7.6; affected 22.5.7.7; affected 22.5.7.8; affected 22.5.7.9; affected 22.5.7.10; affected 22.5.7.11; affected 22.5.7.12; affected 22.5.7.13; affected 22.5.7.14; affected 22.5.7.15; affected 22.5.7.16; affected 22.5.7.17; affected 22.5.7.18; affected 22.5.7.19; affected 22.5.7.20; affected 22.5.7.21; affected 22.5.7.22; affected 22.5.7.23; affected 22.5.7.24; affected 22.5.7.25; affected 22.5.7.26; affected 22.5.7.27; affected 22.5.7.28; affected 22.5.7.29; affected 22.5.7.30; affected 22.5.7.31; affected 22.5.7.32; affected 22.5.7.33; affected 22.5.7.34; affected 22.5.7.35; affected 22.5.7.36; affected 22.5.7.37; affected 22.5.7.38; affected 22.5.7.39; affected 22.5.7.40; affected 22.5.7.41; affected 22.5.7.42; affected 22.5.7.43; affected 22.5.7.44; affected 22.5.7.45; affected 22.5.7.46; affected 22.5.7.47; affected 22.5.7.48; affected 22.5.7.49; affected 22.5.7.50; affected 22.5.7.51; affected 22.5.7.52; affected 22.5.7.53; affected 22.5.7.54; affected 22.5.7.55; affected 22.5.7.56; affected 22.5.7.57; affected 22.5.7.58; affected 22.5.7.59; affected 22.5.7.60; affected 22.5.7.61; affected 22.5.7.62; affected 22.5.7.63; affected 22.5.7.64; affected 22.5.7.65; affected 22.5.7.66; affected 22.5.7.67; affected 22.5.7.68; affected 22.5.7.69; affected 22.5.7.70; affected 22.5.7.71; affected 22.5.7.72; affected 22.5.7.73; affected 22.5.7.74; affected 22.5.7.75; affected 22.5.7.76; affected 22.5.7.77; affected 22.5.7.78; affected 22.5.7.79; affected 22.5.7.80; affected 22.5.7.81; affected 22.5.7.82; affected 22.5.7.83; affected 22.5.7.84; affected 22.5.7.85; affected 22.5.7.86; affected 22.5.7.87; affected 22.5.7.88; affected 22.5.7.89; affected 22.5.7.90; affected 22.5.7.91; affected 22.5.7.92; affected 22.5.7.93 |
CWE
CWE-259, CWE-255
References
- https://vuldb.com/?id.328085
- https://vuldb.com/?ctiid.328085
- https://vuldb.com/?submit.673128
- https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/RP3.md
- https://www.tenda.com.cn/
ADP enrichment
No English description supplied.
No references supplied.