CVE-2020-28095 - On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop

Back Back to CVE browser

HIGH

On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop

Published Dec 30, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.17%

Description

On Tenda AC1200 (Model AC6) 15.03.06.51_multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-835

References (1)

https://github.com/cecada/Tenda-AC6-Root-Acces/blob/main/README.md
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/cecada/Tenda-AC6-Root-Acces/blob/main/README.md		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 30, 2020

Updated Aug 4, 2024

Reserved Nov 2, 2020

Link CVE-2020-28095

CISA Vulnrichment

Updated n/a

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2020-28095

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-28095