CVE-2022-41396: Tenda w15e Firmware

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain multiple command injection vulnerabilities in the function setIPsecTunnelList via the IPsecLocalNet and IPsecRemoteNet parameters.

Affected products

• Tenda w15e Firmware: version 15.11.0.10(1576) only

Published 2022-11-15. Last modified 2026-06-17.