Back to KEVs

CVE-2022-40843

The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router...

Basic Information

CVE State
PUBLISHED
Reserved Date
September 19, 2022
Published Date
November 15, 2022
Last Updated
August 03, 2024
Vendor
n/a
Product
n/a
Description
The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of the Administrator's user account.
Tags
nuclei_scanner

CVSS Scores

CVSS v3.1

4.9 - MEDIUM

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploit Status

Exploited in the Wild
Yes (2026-03-25 00:00:00 UTC) Source

References

https://boschko.ca/tenda_ac1200_router/

Known Exploited Vulnerability Information

Source Added Date
The Shadowserver (via CIRCL) 2026-03-25 00:00:00 UTC

Scanner Integrations

Scanner URL Date Detected
Nuclei https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40843.yaml 2025-04-25 00:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Detected by Nuclei

  • Added to KEVIntel