Hardcoded Password Vulnerability in Tenda i29V1.0 Router
CVE-2024-35338
9.8CRITICAL
Summary
The Tenda i29V1.0 Router, specifically version V1.0.0.5, has been identified to contain a security vulnerability due to a hardcoded password associated with the root account. This flaw presents a significant risk, as it allows potential attackers unauthorized access to administrative controls of the device. Such vulnerabilities can lead to unauthorized alterations to the network settings, data interception, and other malicious activities targeting users' network environments. Addressing this issue is crucial for maintaining the security and integrity of networks utilizing the affected router model.
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published