CVE-2022-41396

CWE-78 — OS Command Injection3 documents3 sources
Severity
7.8HIGH
EPSS
1.6%
top 18.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Tenda W15e Firmware
Timeline
PublishedNov 15

Description

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple command injection vulnerabilities in the function setIPsecTunnelList via the IPsecLocalNet and IPsecRemoteNet parameters.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶NVDtenda/w15e_firmware15.11.0.10\(1576\)

🔴Vulnerability Details

2
CVEList
CVE-2022-41396: Tenda AC1200 Router Model W15Ev2 V15↗2022-11-15
▶
GHSA
GHSA-7j6c-r569-6rvc: Tenda AC1200 Router Model W15Ev2 V15↗2022-11-15
▶
CVE-2022-41396 (HIGH CVSS 7.8) | Tenda AC1200 Router Model W15Ev2 V1 | cvebase.io