← Database

CVE-2022-40847

HIGH CVSS: 7.8 Published: 2022-11-15 Modified: 2026-06-17

Description

In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter.

Affected Platforms

Tenda W15ETenda W15E Firmware

Weakness Type

CWE-78, CWE-78

References