CVE-2022-40847: OS Command Injection
In Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576), there exists a command injection vulnerability in the function formSetFixTools. This vulnerability allows attackers to run arbitrary commands on the server via the hostname parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-40847?
CVE-2022-40847 is considered a high severity vulnerability due to its ability to allow arbitrary command execution.
How do I fix CVE-2022-40847?
To mitigate CVE-2022-40847, update the Tenda AC1200 Router to the latest firmware version that addresses the vulnerability.
Which devices are affected by CVE-2022-40847?
CVE-2022-40847 specifically affects the Tenda AC1200 Router model W15Ev2 running firmware version 15.11.0.10(1576).
What is the exploit method for CVE-2022-40847?
CVE-2022-40847 can be exploited through command injection via the hostname parameter in the function formSetFixTools.
What can attackers gain through CVE-2022-40847?
Attackers exploiting CVE-2022-40847 can execute arbitrary commands on the router, potentially compromising the device and the network it connects to.