Lucene search

K
cveMitreCVE-2022-45667
HistoryDec 02, 2022 - 6:15 p.m.

CVE-2022-45667

2022-12-0218:15:12
CWE-352
mitre
web.nvd.nist.gov
25
cve-2022-45667
tenda i22
csrf
cross site request forgery
nvd

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

26.0%

Tenda i22 V1.0.0.3(4687) is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet.

Affected configurations

Nvd
Node
tendai22_firmwareMatch1.0.0.3\(4687\)
AND
tendai22Match-
VendorProductVersionCPE
tendai22_firmware1.0.0.3(4687)cpe:2.3:o:tenda:i22_firmware:1.0.0.3\(4687\):*:*:*:*:*:*:*
tendai22-cpe:2.3:h:tenda:i22:-:*:*:*:*:*:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

26.0%

Related for CVE-2022-45667