CVE-2022-36552

Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which allows attackers to steal all data such as source code and system files via a crafted GET request.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-08-30

Last modified

2026-07-09

Weaknesses

CWE-552

Affected products

• Ac6 Firmware (Tendacn)

References

• https://drive.google.com/drive/folders/1VxR4lhaWNWLuAPdJK2aRF6zfo_mRyiFO?usp=sharing