A vulnerability was determined in Tenda AC1206 15.03.06.23. This vulnerability affects the function TendaTelnet of the file /goform/telnet of the component Web UI. Executing a manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability has been identified in the Tenda AC1206 router running firmware version 15.03.06.23. The flaw resides in the TendaTelnet function within the /goform/telnet endpoint of the device's Web UI component. Exploitation of this vulnerability allows an attacker to bypass authentication entirely, enabling unauthorized access to the telnet functionality. The attack can be launched remotely without requiring physical access to the device. A public exploit has already been disclosed, increasing the risk of active exploitation. This represents a significant security risk for users of the affected Tenda router model. The vulnerability has been catalogued in VulDB and reported to NVD. Users are advised to apply mitigations or firmware updates as soon as they become available.