CVE-2022-45977
published 2022-12-12CVE-2022-45977: Tenda AX12 V22.03.01.21_CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function.
PriorityP260high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
2.11%
81.6th percentile
Tenda AX12 V22.03.01.21_CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tenda | ax12_firmware | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Tenda AX12 22.03.01.21_CN /goform/setMacFilterCfg command injection (EUVD-2022-48816)
vuldb·2026-10-09·CVSS 8.8
CVE-2022-45977 [HIGH] Tenda AX12 22.03.01.21_CN /goform/setMacFilterCfg command injection (EUVD-2022-48816)
A vulnerability classified as critical has been found in Tenda AX12 22.03.01.21_CN. This issue affects some unknown processing of the file /goform/setMacFilterCfg. The manipulation leads to command injection.
This vulnerability is uniquely identified as CVE-2022-45977. The attack can only be initiated within the local network. No exploit exists.
GHSA
GHSA-4pmx-vh95-832r: Tenda AX12 V22
ghsa_unreviewed·2022-12-12
CVE-2022-45977 [HIGH] CWE-77 GHSA-4pmx-vh95-832r: Tenda AX12 V22
Tenda AX12 V22.03.01.21_CN was found to have a command injection vulnerability via /goform/setMacFilterCfg function.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-12
Published