St4R0003

**Name of the Vulnerable Software and Affected Versions** Tenda AC1206 version 15.03.06.23 **Description** A flaw in the Web UI component allows remote attackers to bypass authentication. This occurs within the `TendaTelnet()` function located in the `/goform/telnet` endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the `/goform/telnet` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Tenda AC1206 version 15.03.06.23 **Description** A flaw in the Web UI component allows remote attackers to bypass authentication. This occurs within the `R7WebsSecurityHandler()` function located in the `/goform/ate` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda AC18 version 15.03.05.19 **Description** A security flaw in the Telnet Handler component allows remote attackers to bypass authentication. The issue resides within an unknown function of the '/goform/telnet' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.