Lucene search
HistoryAug 30, 2022 - 4:15 p.m.
CVE-2022-37176
tenda ac6
firmware vulnerability
wi-fi password
open security mode
packet crafting
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.4%
Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to remove the Wi-Fi password and force the device into open security mode via a crafted packet sent to goform/setWizard.
Affected configurations
Node
tendacnac6_firmwareRange≤02.03.01.114
tendacnac6Match5.0
Related
cve
cve
CVE-2022-37176
2022-08-30 16:15:08
prion
prion
Input validation
2022-08-30 16:15:00
cvelist
cvelist
CVE-2022-37176
2022-08-30 15:07:40
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.4%
Related for NVD:CVE-2022-37176