CVE-2022-41395: Tenda w15e Firmware

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a command injection vulnerability via the dmzHost parameter in the setDMZ function.

Affected products

• Tenda w15e Firmware: version 15.11.0.10(1576) only

Published 2022-11-15. Last modified 2026-06-17.