Vulnerability Details CVE-2022-40847
In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.2%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2022-40847
-
cpe:2.3:h:tenda:ac1200_v-w15ev2:-
-
cpe:2.3:o:tenda:w15e_firmware:15.11.0.10(1576)