Lucene search

K
cve[email protected]CVE-2022-37810
HistoryAug 25, 2022 - 3:15 p.m.

CVE-2022-37810

2022-08-2515:15:10
CWE-78
web.nvd.nist.gov
27
4
cve-2022-37810
tenda ac1206
v15.03.06.23
command injection
mac parameter
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.056 Low

EPSS

Percentile

93.3%

Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac.

Affected configurations

NVD
Node
tendaac1206_firmwareMatch15.03.06.23
AND
tendaac1206Match-

Social References

More

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.056 Low

EPSS

Percentile

93.3%