Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50_multi was discovered to contain a cross-site scripting (XSS) vulnerability via the deviceId parameter in the Parental Control module.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/173029/Tenda-AC6-AC1200-15.03.06.50_multi-Cross-Site-Scripting.html | Exploit Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
| AND |
|
History
03 Jul 2023, 19:22
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:tenda:ac6_firmware:15.03.06.50_multi:*:*:*:*:*:*:* cpe:2.3:h:tenda:ac6:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| First Time |
Tenda ac6
Tenda Tenda ac6 Firmware |
|
| References | (MISC) http://packetstormsecurity.com/files/173029/Tenda-AC6-AC1200-15.03.06.50_multi-Cross-Site-Scripting.html - Exploit, Third Party Advisory, VDB Entry | |
| CWE | CWE-79 |
26 Jun 2023, 17:51
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-26 17:15
Updated : 2023-12-10 15:01
NVD link : CVE-2022-40010
Mitre link : CVE-2022-40010
CVE.ORG link : CVE-2022-40010
JSON object : View
Products Affected
tenda
- ac6
- ac6_firmware
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')