CVE-2022-40843

 

Published at: - 15-11-2022 03:15

Last modified: - 27-01-2023 03:24

Total changes: - 4

Description

The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of the Administrator's user account.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://boschko.ca/tenda_ac1200_router/

 

Keywords

NVD

 

CVE-2022-40843

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures