Tenda AC1200 Smart Dual-Band WiFi Router Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the Tenda AC1200 Smart Dual-Band WiFi Router, specifically in Model AC6 v2.0 running Firmware v15.03.06.50. This vulnerability arises from incorrect access control, allowing attackers to bypass authentication by sending a crafted web request. Once authenticated, attackers could potentially change router configurations or exploit other vulnerabilities.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling unauthorized access to the router's administrative functions. This could lead to unauthorized changes in router settings or the exploitation of additional vulnerabilities within the device.

Reproduction

To reproduce this vulnerability, intercept a login request to the router using a tool like Burp Suite. The request will include the username and password. By changing the username and password values, it is possible to bypass authentication and gain access to the router.