Lucene search

MitreCVE-2022-42077

HistoryOct 12, 2022 - 7:15 p.m.

CVE-2022-42077

2022-10-1219:15:09

CWE-352

mitre

web.nvd.nist.gov

cve-2022-42077

tenda

ac1206

csrf

vulnerability

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

25.9%

JSON

Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.

Affected configurations

Nvd

Node

tendaac1206_firmwareMatch15.03.06.23_multi_td01

AND

tendaac1206Match-

VendorProductVersionCPE
tendaac1206_firmware15.03.06.23_multi_td01cpe:2.3:o:tenda:ac1206_firmware:15.03.06.23_multi_td01:*:*:*:*:*:*:*
tendaac1206-cpe:2.3:h:tenda:ac1206:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tenda	ac1206_firmware	15.03.06.23_multi_td01	cpe:2.3:o:tenda:ac1206_firmware:15.03.06.23_multi_td01:::::::*
tenda	ac1206	-	cpe:2.3:h:tenda:ac1206:-:::::::*

References

github.com/tianhui999/myCVE/blob/main/AC1206/AC1206-1.md

Social References

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

25.9%

JSON

Related for CVE-2022-42077