Tenda FH1202 Web Management Interface Improper Access Control Vulnerability

A critical vulnerability has been identified in the Tenda FH1202 router, specifically in version 1.2.0.14(408). The issue arises within the Web Management Interface, particularly in the file '/goform/VirSerDMZ'. This vulnerability involves improper access controls, allowing unauthorized users to manipulate certain functionalities. The flaw can be exploited remotely without any authentication requirements, potentially leading to unauthorized actions or changes on the device.

Impact

Exploitation of this vulnerability could result in unauthorized access to the '/goform/VirSerDMZ' interface, allowing attackers to manipulate settings or functionalities without proper authorization, thereby compromising the integrity of the device's configuration.