Description
An information disclosure vulnerability exists in the /goform/getproductInfo functionality of Tenda AC6 V5.0 V02.03.01.110. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this vulnerability.
Problem types
CWE-288: Authentication Bypass Using an Alternate Path or Channel
Product status
Credits
Discovered by Lilith >_> of Cisco Talos.
References
talosintelligence.com/vulnerability_reports/TALOS-2025-2164
