A budget router can be the open door into your company network. CERT/CC confirmed a “hidden password” (backdoor) in certain Tenda router firmware versions — models FH1201, W15E, AC10, AC5 and AC6.
Anyone who knows that password gets full administrative control of the device, regardless of the password you set. For now there is no update from the manufacturer.
- Check what router your firm uses; if it’s a Tenda, note the model and firmware version.
- Disable remote/WAN management in the router settings.
- Change the default local IP address — it lowers the odds of being found by automated scans.
A budget router isn’t a problem in itself. One that no longer gets security updates is.
This article was generated with AI assistance.