CVE-2022-42078: CSRF
Published Oct 12, 2022
·Updated
Tenda AC1206 USAC1206V1.0RTLV15.03.06.23multiTD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet.
Affected Software
4 affected components
Tenda Ac1206 Firmware=15.03.06.23_multi_td01
Tenda AC1206
All of the following
Tenda Ac1206 Firmware=15.03.06.23_multi_td01
Tenda AC1206
Event History
Oct 12, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this Tenda AC1206 firmware vulnerability?
The vulnerability ID for this Tenda AC1206 firmware vulnerability is CVE-2022-42078.
2
What is the severity of CVE-2022-42078?
The severity of CVE-2022-42078 is medium with a score of 6.5.
3
Which software version of Tenda AC1206 is affected by CVE-2022-42078?
The Tenda AC1206 firmware version 15.03.06.23_multi_td01 is affected by CVE-2022-42078.
4
What is the impact of Cross Site Request Forgery (CSRF) vulnerability in Tenda AC1206?
The Cross Site Request Forgery (CSRF) vulnerability in Tenda AC1206 allows an attacker to perform unauthorized actions on behalf of the victim.
5
Is Tenda AC1206 software version 15.03.06.23_multi_td01 safe from CVE-2022-42078?
No, Tenda AC1206 software version 15.03.06.23_multi_td01 is vulnerable to CVE-2022-42078.