The Tenda i12 device running firmware version 1.0.0.11(3862) contains a path traversal vulnerability in an unspecified function of its HTTP Handler component. This flaw allows remote attackers to perform path traversal attacks, potentially accessing unauthorized files on the device. The vulnerability requires no privileges or user interaction and has a medium impact on confidentiality, integrity, and availability. Although the exploit has been publicly disclosed, there is no vendor-provided patch or official remediation at this time.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to access files outside the intended directory scope on the affected Tenda i12 device. This may lead to unauthorized disclosure of sensitive information or other impacts depending on the files accessed. The vulnerability has a medium severity rating with a CVSS score of 6.9.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround has been provided, users should monitor the vendor's communications for updates. Until a patch is available, restricting network access to the device's management interface may reduce exposure.