CyberRota Analysis
AI-GeneratedA critical vulnerability in the Tenda AC1206 router's Web UI allows remote attackers to exploit the R7WebsSecurityHandler function, resulting in missing authentication. This flaw could enable unauthorized access to the device, potentially compromising network security. Organizations using this router should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in Tenda AC1206 15.03.06.23. This issue affects the function R7WebsSecurityHandler of the file /goform/ate of the component Web UI. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly available and might be used.