Impact

The vulnerability carries a CVSS v3.1 base score of 10.0, indicating the highest level of severity. Unauthorized access to network infrastructure devices like the Tenda AC1206 exposes residential or small business environments to persistent threats, including traffic interception, DNS hijacking, and internal network reconnaissance.

Recommendation

Prioritize the identification of Tenda AC1206 devices within the network inventory. Because this is a router-level vulnerability, detection engineering should prioritize network-based monitoring. Monitor for anomalous HTTP requests directed at the web management interface of identified Tenda devices. Implement network segmentation to isolate such devices from critical assets until firmware patches are applied by the vendor.