CVE-2022-42078

Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet.

CVSS v3.1 NVD

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.38% chance of exploitation in the next 30 days, 31st percentile

Published

2022-10-12

Updated

2025-05-15

Proof-of-concept exploits (1)

• tianhui999/myCVE/blob/main/AC1206/AC1206-2.md

References

• CVE Record
• NVD entry

Related

• CVE-2022-27374
• CVE-2022-27375
• CVE-2022-42077
• CVE-2022-42079
• CVE-2022-42080
• CVE-2022-42081