CVE-2021-44971

Severity

critical

Source

NVD · cve

Published

2022-01-28

CVSS

9.8

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-44971

⚡ RCE shame 50/100 rce

Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. an attacker can obtain sensitive information, and even combine it with authenticated command injection to implement RCE.

Players implicated

tenda · vendor ac15 · product ac15 firmware · product ac5 · product ac5 firmware · product

Description

Sentiment · trusted sources

synthesis severe-fallout -0.80

CVE-2021-44971 represents a critical authentication bypass vulnerability in Tenda devices, enabling attackers to obtain sensitive information and execute remote code execution (RCE) when combined with
cooey ↗ severe-fallout -0.90

Critical vulnerability disclosure

“Multiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05.20_multi?AC5V1.0 Firmware V15.03.06.48_multi and so on. an attacker can obtain sensitive information, and even combine it with authenticated command injection to implement RCE.”
www.techradar.com ↗ severe-fallout -0.80

Critical security backdoor

“These popular Tenda routers have an unpatched security backdoor which could give hackers access”
app.opencve.io ↗ severe-fallout +0.00

Neutral database listing
www.cvefind.com ↗ severe-fallout +0.00

Neutral database listing
SentinelOne ↗ severe-fallout +0.00

Neutral database listing
cve.akaoma.com ↗ severe-fallout +0.00

Neutral database listing
CISA ↗ severe-fallout +0.00

Neutral advisory page

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.