PT-2022-27617 · Tenda · Tenda Ac6

Published 2022-12-02 · Updated 2025-04-24 · CVE-2022-45674

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tenda AC6V1.0 version 15.03.05.19

Description The issue is related to Cross Site Request Forgery (CSRF) and is exploitable via the fromSysToolReboot function. This allows for unauthorized actions to be performed on the system.

Recommendations For Tenda AC6V1.0 version 15.03.05.19, consider disabling the fromSysToolReboot function until a patch is available to prevent exploitation.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-45674

Affected Products

Tenda Ac6

References · 6

• 🔥 https://github.com/ConfusedChenSir/VulnerabilityProjectRecords/blob/main/fromSysToolReboot/fromSysToolReboot.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-45674 · Security Note
• https://osv.dev/vulnerability/CVE-2022-45674 · Vendor Advisory
• https://t.me/cibsecurity/53816 · Telegram Post
• https://t.me/cvenotify/39202 · Telegram Post
• https://t.me/cvenotify/119691 · Telegram Post