Authentication Bypass in Tenda AC18 Router

Executive Summary

This vulnerability is a missing authentication flaw in the Tenda AC18 router firmware version 15.03.05.19. It allows remote attackers to enable Telnet access without credentials by exploiting the /goform/telnet endpoint. In default configurations, the admin password is empty, making the device vulnerable to unauthorized access.

Useful 0 Not Useful 0

Detection Guidance

Check if the Tenda AC18 router has Telnet enabled without authentication by sending an HTTP request to /goform/telnet. If the response indicates Telnet is enabled or if you can access the device via Telnet without credentials, the system is likely vulnerable.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability enables remote attackers to gain unauthorized Telnet access to the router. Once exploited, attackers could execute arbitrary commands, leading to full system compromise, data theft, or further network infiltration. The public availability of exploit code increases the risk of real-world attacks.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and network security, such as GDPR and HIPAA, due to inadequate access controls and potential unauthorized access to sensitive data. Organizations using affected devices may face regulatory penalties for failing to maintain secure configurations.

Useful 0 Not Useful 0

Mitigation Strategies

Disable Telnet access on the Tenda AC18 router and enable strong authentication. Update the router firmware to the latest version if available. Block external access to the router's web interface and Telnet port (23) from untrusted networks.

Useful 0 Not Useful 0