CVE-2022-40843

4.9 mediumEPSS 29%

Medium (4.9) in tenda w15e firmware. EPSS 29% chance of exploitation in the next 30 days.

The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of the Administrator's user account.

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 29% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
Published: 2022-11-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tenda:w15e_firmware

References

https://boschko.ca/tenda_ac1200_router/
https://boschko.ca/tenda_ac1200_router/

Check your stack JSON