How severe is CVE-2022-40843?

CVE-2022-40843 has a CVSS 3.x base score of 4.9, rated medium severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.

Is CVE-2022-40843 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 29% (98th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2022-40843?

CVE-2022-40843 affects Tenda W15e Firmware. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2022-40843?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2022-40843 published?

CVE-2022-40843 was published on 2022-11-15 and last updated on 2026-06-17.

CVE-2022-40843

CVE-2022-40843 is a medium-severity vulnerability in Tenda W15e Firmware with a CVSS 3.x base score of 4.9. Its EPSS exploit-prediction score of 29% places it in the 98th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: Medium (CVSS 3.x base score 4.9)
EPSS exploit prediction: 29% (98th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Tenda W15e Firmware
Published: 2022-11-15
Last modified: 2026-06-17

Description

The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of the Administrator's user account.

Frequently asked questions

What is CVE-2022-40843?: The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of the Administrator's user account.
How severe is CVE-2022-40843?: CVE-2022-40843 has a CVSS 3.x base score of 4.9, rated medium severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
Is CVE-2022-40843 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 29% (98th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2022-40843?: CVE-2022-40843 affects Tenda W15e Firmware. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2022-40843?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2022-40843 published?: CVE-2022-40843 was published on 2022-11-15 and last updated on 2026-06-17.

References

https://boschko.ca/tenda_ac1200_router/

Affected products (1)

cpe:2.3:o:tenda:w15e_firmware:15.11.0.10\(1576\):*:*:*:*:*:*:*

More vulnerabilities in Tenda W15e Firmware

CVE-2023-27063 — Critical (CVSS 9.8): Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the…
CVE-2023-27061 — Critical (CVSS 9.8): Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the…
CVE-2022-42058 — Critical (CVSS 9.8): Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the…
CVE-2024-4127 — High (CVSS 8.8): A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. Affected is the function…
CVE-2024-4126 — High (CVSS 8.8): A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue affects the function…
CVE-2024-4125 — High (CVSS 8.8): A vulnerability has been found in Tenda W15E 15.11.0.14 and classified as critical. This vulnerability affects the…

All CVEs affecting Tenda W15e Firmware →