PT-2022-25576 · Tenda · Tenda Ac1200 Router
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Tenda AC1200 Router model W15Ev2 version V15.11.0.10(1576)
Description
The issue allows an attacker with access to the router to expose sensitive information they are not explicitly authorized to have, by combining a password exposure vulnerability with improper authorization and improper session management vulnerabilities.
Recommendations
For Tenda AC1200 Router model W15Ev2 version V15.11.0.10(1576), consider restricting access to the router and sensitive information until a patch or fix is available. As a temporary workaround, limit the use of features that may be affected by the improper authorization and session management vulnerabilities. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tenda Ac1200 Router