Tenda may just rebrand, right? It seems like many chinese brands will either rebrand or have a 'competing' brand with the same internals but different externals. (I have no idea if Tenda does this, I've just seen it previously. Specifically with security cameras)
I wish the authors provided some method for checking this vulnerability other than fw version. It seems like Tenda could just change the password and say "yep! all safe now"
I thought it was a safe assumption by now that any kit out of China is assumed — no, expected — to have hardcoded root credentials. Bonus if it's running a telnet daemon.
I don't even think it's malicious, it's an ingrained cultural disregard and not caring by the most disconnected, lack of empathy having human beings on Earth.
These are the same people that poison their own children to save pennies.
> Tenda is a supplier of home and business network devices such as routers, switches, wireless access points, and video surveillance equipment.
I was unfamiliar with Tenda.
> Shenzhen Tenda Technology Co.,Ltd. ( https://www.tendacn.com/us/profile )
Tenda may just rebrand, right? It seems like many chinese brands will either rebrand or have a 'competing' brand with the same internals but different externals. (I have no idea if Tenda does this, I've just seen it previously. Specifically with security cameras)
I wish the authors provided some method for checking this vulnerability other than fw version. It seems like Tenda could just change the password and say "yep! all safe now"
I’m in the USA and have a Tenda WiFi usb stick. Not as popular as other brands but they are around
I thought it was a safe assumption by now that any kit out of China is assumed — no, expected — to have hardcoded root credentials. Bonus if it's running a telnet daemon.
I don't even think it's malicious, it's an ingrained cultural disregard and not caring by the most disconnected, lack of empathy having human beings on Earth.
These are the same people that poison their own children to save pennies.
https://en.wikipedia.org/wiki/2008_Chinese_milk_scandal
Up and out the back door, any 'ol time.
Yet another Chinese company selling backdoor'd product. Surprise surprise...
Are you referring to the concept of “prayer?”
Chinese undocumented auth: commies tryna steal mah api tokenz
US undocumented auth: legitimate usecase for out of band support nothing to see here
If you're accusing CERT of hypocrisy, what's an example of the second case?