CVE-2022-41396

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple command injection vulnerabilities in the function setIPsecTunnelList via the IPsecLocalNet and IPsecRemoteNet parameters.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2022-11-15

Last modified

2025-04-30

Weaknesses

CWE-78

Affected products

• W15e Firmware (Tenda)

References

• https://boschko.ca/tenda_ac1200_router
• https://boschko.ca/tenda_ac1200_router/