CVE-2022-41395 — Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the dmzHost parameter in the setDMZ function

Back Back to CVE browser

HIGH

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the dmzHost parameter in the setDMZ function

Published Nov 15, 2022

7.8

HIGH

CVSS 3.1

EPSS 1.36%

Description

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the dmzHost parameter in the setDMZ function.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.36% 0.01357

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.01357

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	1.36% (0.01357)	70.71th	v5 (v2026.06.15)
Jun 15, 2026	1.38% (0.01377)	68.41th	v5 (v2026.06.15)
Nov 18, 2025	1.63% (0.01626)	80.35th	v4 (v2025.03.14)
Mar 17, 2025	0.31% (0.00306)	51.63th	v4 (v2025.03.14)
Dec 12, 2024	0.08% (0.00085)	37.85th	v3 (v2023.03.01)
Jul 20, 2024	0.08% (0.00085)	36.58th	v3 (v2023.03.01)
Jun 7, 2024	0.08% (0.00077)	33.07th	v3 (v2023.03.01)
Jun 6, 2024	0.06% (0.00058)	24.54th	v3 (v2023.03.01)
Mar 7, 2023	0.06% (0.00058)	22.53th	v3 (v2023.03.01)
Mar 6, 2023	1.00% (0.01005)	37.74th	v2 (v2022.01.01)
Nov 15, 2022	1.00% (0.01005)	36.57th	v2 (v2022.01.01)