PT-2022-27610 · Tenda · Tenda I22
CVE-2022-45668
·
Published
2022-12-02
·
Updated
2025-04-24
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Tenda i22 version 1.0.0.3(4687)
Description
The issue is related to Cross Site Request Forgery (CSRF) via the
fromSysToolReboot function. This allows for unauthorized actions to be performed on the device.Recommendations
For Tenda i22 version 1.0.0.3(4687), as a temporary workaround, consider disabling the
fromSysToolReboot function until a patch is available.Exploit
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tenda I22