CVE-2022-40845

6.5 mediumEPSS 0.7%

Medium (6.5) in tenda w15e firmware. EPSS 0.7% chance of exploitation in the next 30 days.

The Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576) is affected by a password exposure vulnerability. When combined with the improper authorization/improper session management vulnerability, an attacker with access to the router may be able to expose sensitive information which they're not explicitly authorized to have.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-425
Published: 2022-11-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tenda:w15e_firmware

References

https://boschko.ca/tenda_ac1200_router/
https://boschko.ca/tenda_ac1200_router/

Check your stack JSON