CVE-2022-40845

MEDIUM

Tenda AC1200 Router W15Ev2 V15.11.0.10(1576) - Info Disclosure

Title source: llm
STIX 2.1

Description

The Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576) is affected by a password exposure vulnerability. When combined with the improper authorization/improper session management vulnerability, an attacker with access to the router may be able to expose sensitive information which they're not explicitly authorized to have.

Scores

CVSS v3 6.5
EPSS 0.0027
EPSS Percentile 50.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-425
Status published
Products (1)
tenda/w15e_firmware 15.11.0.10\(1576\)
Published Nov 15, 2022
Tracked Since Feb 18, 2026