TL;DR
Researchers have found a hidden authentication backdoor in multiple versions of Tenda router firmware. This vulnerability could allow unauthorized access, posing risks to users’ networks. The issue is confirmed, but the full scope remains under investigation.
Security researchers have confirmed that multiple versions of Tenda router firmware contain a hidden authentication backdoor, which could allow unauthorized users to access affected devices. This discovery raises significant security concerns for users relying on Tenda networking equipment.
The vulnerability was identified by cybersecurity firm CyberSecure Labs during routine firmware analysis. The backdoor is embedded within the firmware’s code, enabling bypass of standard login procedures without proper credentials. Affected firmware versions include Tenda models released between 2022 and 2023, with the issue confirmed through reverse engineering and security testing.
Tenda has acknowledged the presence of the flaw following initial reports but has not yet issued a comprehensive patch. The backdoor appears to be a hidden administrative access point, which could be exploited remotely if the device is connected to the internet and exposed to malicious actors. Experts warn that this could lead to unauthorized control over affected routers, data interception, or network manipulation.
Potential Impact on Millions of Tenda Users
This vulnerability is significant because Tenda routers are widely used in homes, small businesses, and public networks worldwide. The presence of a hidden backdoor means malicious actors could gain persistent access to networks without detection, risking data theft, network hijacking, or further cyberattacks. The issue underscores the importance of firmware security and timely patching for connected devices.
Tenda WiFi 6 Router, AX3000 Dual Band Gigabit Wireless Router for Home, 4 Gigabit Ports, Easy Setup, VPN Support, Parental Controls, WPA3 Security, MU-MIMO & OFDMA(RX12Pro)
𝐍𝐞𝐱𝐭-𝐆𝐞𝐧 𝐖𝐢-𝐅𝐢 𝟔 𝐏𝐞𝐫𝐟𝐨𝐫𝐦𝐚𝐧𝐜𝐞 – Dual-band AX3000 delivers up to 2402 Mbps on 5 GHz and 574 Mbps…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Previous Firmware Security Incidents in Consumer Routers
Security flaws in consumer-grade routers are a recurring concern. Past incidents involved backdoors, hardcoded credentials, or remote management vulnerabilities in various brands. Tenda’s latest discovery adds to this pattern, highlighting ongoing challenges in securing IoT and networking devices. The company’s firmware updates are often delayed or incomplete, leaving users exposed.
“We are aware of the issue and are working on a fix. Our priority is the security and safety of our customers.”
— Tenda spokesperson
ASUS RT-AX1800S Dual Band WiFi 6 Extendable Router, Subscription-Free Network Security, Parental Control, Built-in VPN, AiMesh Compatible, Gaming & Streaming, Smart Home
New-Gen WiFi Standard – WiFi 6(802.11ax) standard supporting MU-MIMO and OFDMA technology for better efficiency and throughput.Antenna :…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Scope and Exploitation Potential Still Unclear
While the backdoor has been confirmed in multiple firmware versions, it is not yet clear how widespread the vulnerability is across all Tenda models or how easily it can be exploited in real-world scenarios. Researchers are still analyzing the full extent of the issue, and Tenda has not disclosed detailed technical information about the backdoor’s implementation or the number of affected devices.
TP-Link Dual-Band AX3000 Wi-Fi 6 Router Archer AX55 | Wireless Gigabit Internet Router for Home | EasyMesh Compatible | VPN Clients & Server | HomeShield, OFDMA, MU-MIMO | USB 3.0 | Secure by Design
Next-Gen Gigabit Wi-Fi 6 Speeds: 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz bands ensure…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Tenda Firmware Updates and User Precautions Pending
Tenda has announced that a firmware update addressing the backdoor is in development, but no specific release date has been provided. Users are advised to monitor official channels for updates and to disable remote management features until patches are applied. Security experts recommend changing default passwords and enabling network encryption as additional safeguards.
TP-Link AX1800 WiFi 6 Router (Archer AX21 V5) – Dual Band Wireless Internet, Gigabit, Easy Mesh, Works with Alexa – A Certified for Humans Device, Free Expert Support
DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
How do I know if my Tenda router is affected?
Researchers have identified certain firmware versions with the backdoor. Check your device’s firmware version in the admin panel and compare it to the affected versions listed by Tenda or cybersecurity reports.
Can I still use my Tenda router safely?
Until a patch is released, it is recommended to disable remote management, change default passwords, and ensure your network uses strong encryption to reduce risk.
When will Tenda release a security update?
Tenda has not announced an exact timeline but has stated that a fix is in development. Users should stay tuned to official communications for updates.
What should I do if I suspect my device is compromised?
Immediately disconnect the router from the internet, perform a factory reset, and update to the latest firmware once available. Consider changing passwords and monitoring network activity for unusual behavior.
Source: hn
