published September 4, 2020
⚠️ A tiny oversight could grant attackers remote control! The Tenda AC18 Router's logincheck() function mishandles authentication when the administrator UI is set to "radius" — a backdoor just waiting to be discovered! 🔥 Think of it like a hotel reception that fails to verify the guest's ID; anyone could check in and access the rooms without a proper login. This flaw allows an unauthorized guest to waltz right into the administration panel! If an attacker exploits this vulnerability, they could execute any code remotely, potentially taking full control of the router. This could lead to unauthorized access to your network, sensitive data leaks, or even turning your device into a puppet for larger malicious activities!
Think of it like a hotel reception that fails to verify the guest's ID; anyone could check in and access the rooms without a proper login. This flaw allows an unauthorized guest to waltz right into the administration panel! This vulnerability arises from incorrect authentication handling in the logincheck() function found in /usr/lib/lua/ngx_authserver/ngx_wdas.lua of the Tenda AC18 Router, specifically when the administrator UI interface is configured to use RADIUS.
If an attacker exploits this vulnerability, they could execute any code remotely, potentially taking full control of the router. This could lead to unauthorized access to your network, sensitive data leaks, or even turning your device into a puppet for larger malicious activities! To protect your network, check your router's firmware version and update it to the latest version beyond V15.03.05.19(6318) CN. Additionally, consider disabling RADIUS authentication if it’s not necessary for your setup. Regularly audit your router settings for any signs of unauthorized access. You've got this! Following these steps will help secure your router and keep your network safe! 🛡️