VYPR
Medium severity6.5NVD Advisory· Published Apr 25, 2022· Updated Jun 17, 2026

CVE-2022-27374

CVE-2022-27374

Description

Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_42E328 at /goform/SysToolReboot.

Affected products

3
  • Tenda/AX12llm-fuzzy2 versions
    = V22.03.01.21_CN+ 1 more
    • (no CPE)range: = V22.03.01.21_CN
    • (no CPE)
  • cpe:2.3:o:tenda:ax12_firmware:22.03.01.21_cn:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.