CVE-2022-27374

MEDIUM

Tenda AX12 V22.03.01.21_CN - Cross-Site Request Forgery via SysToolReboot Function

Title source: llm

Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_42E328 at /goform/SysToolReboot.

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 6.5

EPSS 0.0011

EPSS Percentile 28.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-352

Status published

Products (1)

tenda/ax12_firmware 22.03.01.21_cn

Published Apr 25, 2022

Tracked Since Feb 18, 2026