Lucene search
PRIOn knowledge basePRION:CVE-2022-40843HistoryNov 15, 2022 - 2:15 a.m.
Authorization
2022-11-1502:15:00
PRIOn knowledge base
www.prio-n.com
2
tenda ac1200
v-w15ev2
improper authorization
bypassed login
syslog.log
md5 password
authenticated attackers
The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of the Administrator’s user account.
| CPE | Name | Operator | Version |
|---|---|---|---|
| w15e_firmware | eq | 15.11.101576 |
References
Related
nuclei
nuclei
Tenda AC1200 V-W15Ev2 - Authentication Bypass
2022-11-03 00:01:10
cvelist
cvelist
CVE-2022-40843
2022-11-15 00:00:00
cve
cve
CVE-2022-40843
2022-11-15 02:15:09
nvd
nvd
CVE-2022-40843
2022-11-15 02:15:09
cnvd
cnvd
Tenda AC1200 authorization error vulnerability
2022-11-21 00:00:00