PT-2022-25576 · Tenda · Tenda Ac1200 Router

Olivier Laflamme · Published 2022-11-15 · Updated 2025-05-13 · CVE-2022-40845

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tenda AC1200 Router model W15Ev2 version V15.11.0.10(1576)

Description The issue allows an attacker with access to the router to expose sensitive information they are not explicitly authorized to have, by combining a password exposure vulnerability with improper authorization and improper session management vulnerabilities.

Recommendations For Tenda AC1200 Router model W15Ev2 version V15.11.0.10(1576), consider restricting access to the router and sensitive information until a patch or fix is available. As a temporary workaround, limit the use of features that may be affected by the improper authorization and session management vulnerabilities. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-425

Related Identifiers

CVE-2022-40845

Affected Products

Tenda Ac1200 Router

References · 6

• 🔥 https://boschko.ca/tenda_ac1200_router · Exploit
• https://osv.dev/vulnerability/CVE-2022-40845 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40845 · Security Note
• https://t.me/cvenotify/42954 · Telegram Post
• https://t.me/cvenotify/37723 · Telegram Post
• https://t.me/cvenotify/122064 · Telegram Post