CVE-2022-36552: Tendacn AC6 Firmware

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which allows attackers to steal all data such as source code and system files via a crafted GET request.

Affected products

• Tendacn AC6 Firmware: up to and including 02.03.01.114

Published 2022-08-30. Last modified 2026-07-09.