PT-2024-13449
CVE-2023-47422
·
تاريخ النشر
2024-02-20
·
تاريخ التحديث
2024-08-26
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Tenda TX9 V1 version 22.03.02.54
Tenda AX3 V3 version 16.03.12.11
Tenda AX9 V1 version 22.03.01.46
Tenda AX12 V1 version 22.03.01.46
Description
An access control issue in /usr/sbin/httpd allows attackers to bypass authentication on any endpoint via a crafted URL.
Recommendations
For Tenda TX9 V1 version 22.03.02.54, update to a version that fixes the access control issue.
For Tenda AX3 V3 version 16.03.12.11, update to a version that fixes the access control issue.
For Tenda AX9 V1 version 22.03.01.46, update to a version that fixes the access control issue.
For Tenda AX12 V1 version 22.03.01.46, update to a version that fixes the access control issue.
As a temporary workaround, consider restricting access to the /usr/sbin/httpd endpoint until a patch is available.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾