Tenda may just rebrand, right? It seems like many chinese brands will either rebrand or have a 'competing' brand with the same internals but different externals. (I have no idea if Tenda does this, I've just seen it previously. Specifically with security cameras)
I wish the authors provided some method for checking this vulnerability other than fw version. It seems like Tenda could just change the password and say "yep! all safe now"
I thought it was a safe assumption by now that any kit out of China is assumed — no, expected — to have hardcoded root credentials. Bonus if it's running a telnet daemon.
I don't even think it's malicious, it's an ingrained cultural disregard and not caring by the most disconnected, lack of empathy having human beings on Earth.
These are the same people that poison their own children to save pennies, why would this be any different?
https://boschko.ca/tenda_ac1200_router/
Spoiler: it's "rzadmin". And it looks like there are a bunch of other goodies in the firmware, too.
I was unfamiliar with Tenda.
> Shenzhen Tenda Technology Co.,Ltd. ( https://www.tendacn.com/us/profile )
Tenda may just rebrand, right? It seems like many chinese brands will either rebrand or have a 'competing' brand with the same internals but different externals. (I have no idea if Tenda does this, I've just seen it previously. Specifically with security cameras)
I wish the authors provided some method for checking this vulnerability other than fw version. It seems like Tenda could just change the password and say "yep! all safe now"
I don't even think it's malicious, it's an ingrained cultural disregard and not caring by the most disconnected, lack of empathy having human beings on Earth.
These are the same people that poison their own children to save pennies, why would this be any different?
https://en.wikipedia.org/wiki/2008_Chinese_milk_scandal
US undocumented auth: legitimate usecase for out of band support nothing to see here