CVE-2022-40843 Auth bypass in n/a
Attackers can bypass router login to read syslog files, exposing administrator MD5 passwords and enabling account takeover.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-40843?
CVE-2022-40843 is a medium-severity authentication bypass vulnerability in n/a, published on 15 Nov 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of the Administrator's user account.
Which versions are affected by CVE-2022-40843?
It affects 1 product.
Products include Tenda W15e Firmware.
How do I fix CVE-2022-40843?
No fix has been published for CVE-2022-40843 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-40843 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-40843 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in n/a
Sources
Also known as GHSA-25jx-22x6-2cx2.