CVE-2026-1610

Katalog CVE

CVSS 8.1 · High EPSS 0,74%

Kerentanan Use of Hard-coded Password pada tenda ax12 pro firmware. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in Tenda AX12 Pro V2 16.03.49.24_cn. Affected by this issue is some unknown functionality of the component Telnet Service. Performing a manipulation results in hard-coded credentials. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitation is known to be difficult. The exploit has been made public and could be used.

Rincian

Terbit di NVD

29 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-259: Use of Hard-coded Password
CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

0,74% peluang dieksploitasi; lebih tinggi dari 53,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.343378 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.740766 advisory pihak ketiga · vdb entry
• https://github.com/QIU-DIE/CVE/issues/49 broken link · issue tracking
• https://vuldb.com/?ctiid.343378 permissions required · vdb entry
• https://www.tenda.com.cn/ product