CVE-2022-40843: tenda w15e_firmware
Vulnerability summary
CVE-2022-40843 is a medium (CVSS 4.9) vulnerability in tenda w15e_firmware. EPSS estimates a 28.80% chance of exploitation in the next 30 days, higher than 98.1% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 15-11-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of the Administrator's user account.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
28.80%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 28.80% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (boschko.ca)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Tenda1 product
- w15e_firmware15.11.0.10\(1576\)
1 vendor · 1 product