PT-2022-26245 · Tenda · Tenda Ax1803
CVE-2022-42087
·
Published
2022-10-12
·
Updated
2025-05-15
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Tenda AX1803 version US AX1803v2.0br v1.0.0.1 2994 CN ZGYD01 4
Description
The issue is related to Cross Site Request Forgery (CSRF) and can be exploited via the
fromSysToolReboot function.Recommendations
For Tenda AX1803 version US AX1803v2.0br v1.0.0.1 2994 CN ZGYD01 4, consider disabling the
fromSysToolReboot function as a temporary workaround until a patch is available.Exploit
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tenda Ax1803