CVE-2022-42086: CSRF

Published Oct 12, 2022

Updated

Tenda AX1803 USAX1803v2.0brv1.0.0.12994CNZGYD014 is vulnerable to Cross Site Request Forgery (CSRF) via function TendaAteMode.

Affected Software

6 affected components

Tenda Ax1803 Firmware=1.0.0.1_2994_cn_zgyd01_4

Tenda ax1803

Tenda ax1803=v2

All of the following

Tenda Ax1803 Firmware=1.0.0.1_2994_cn_zgyd01_4

Any of the following

Tenda ax1803

Tenda ax1803=v2

Event History

Oct 12, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-42086?

CVE-2022-42086 is a vulnerability that affects Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 firmware, making it vulnerable to Cross Site Request Forgery (CSRF) attacks.

How severe is CVE-2022-42086?

CVE-2022-42086 has a severity rating of 6.5, which is considered medium.

How does CVE-2022-42086 work?

CVE-2022-42086 allows an attacker to perform Cross Site Request Forgery attacks by exploiting the TendaAteMode function in the Tenda AX1803 firmware.

Is Tenda AX1803 firmware version 1.0.0.1_2994_cn_zgyd01_4 vulnerable to CVE-2022-42086?

Yes, Tenda AX1803 firmware version 1.0.0.1_2994_cn_zgyd01_4 is vulnerable to CVE-2022-42086.

How can I protect my Tenda AX1803 router from CVE-2022-42086?

To protect your Tenda AX1803 router from CVE-2022-42086, it is recommended to update the firmware to a version that includes a fix for this vulnerability.