Lucene search

MitreCVE-2022-42087

HistoryOct 12, 2022 - 7:15 p.m.

CVE-2022-42087

2022-10-1219:15:09

CWE-352

mitre

web.nvd.nist.gov

cve-2022-42087

tenda

ax1803

csrf

security vulnerability

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

25.9%

JSON

Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.

Affected configurations

Nvd

Node

tendaax1803_firmwareMatch1.0.0.1_2994_cn_zgyd01_4

AND

tendaax1803Match-

tendaax1803Matchv2

VendorProductVersionCPE
tendaax1803_firmware1.0.0.1_2994_cn_zgyd01_4cpe:2.3:o:tenda:ax1803_firmware:1.0.0.1_2994_cn_zgyd01_4:*:*:*:*:*:*:*
tendaax1803-cpe:2.3:h:tenda:ax1803:-:*:*:*:*:*:*:*
tendaax1803v2cpe:2.3:h:tenda:ax1803:v2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tenda	ax1803_firmware	1.0.0.1_2994_cn_zgyd01_4	cpe:2.3:o:tenda:ax1803_firmware:1.0.0.1_2994_cn_zgyd01_4:::::::*
tenda	ax1803	-	cpe:2.3:h:tenda:ax1803:-:::::::*
tenda	ax1803	v2	cpe:2.3:h:tenda:ax1803:v2:::::::*

References

github.com/tianhui999/myCVE/blob/main/AX1803/AX1803-1.md

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

25.9%

JSON

Related for CVE-2022-42087