VULNERABILITY INTELLIGENCE

CVE-2022-36552

CVSS score7.5 HIGH

EPSS probability0.72%

CISA KEVNot currently listed

Published2022-08-30

Last modified2026-07-09

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which allows attackers to steal all data such as source code and system files via a crafted GET request.

Weakness classification

CWE-552: Files or Directories Accessible to External Parties

Primary references

cve@mitre.org — Permissions Required, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Third Party Advisory