Tenda Rx9 Pro Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tenda Rx9 Pro Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

CVE-2022-38829 — CVSS 9.8 (critical): Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg.
CVE-2022-38830 — CVSS 9.8 (critical): Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status.
CVE-2022-38831 — CVSS 9.8 (critical): Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList
CVE-2024-10351 — CVSS 8.8 (high): A vulnerability was found in Tenda RX9 Pro 22.03.02.20. It has been rated as critical. This issue affects the function sub_424CE0 of the…
CVE-2024-10282 — CVSS 8.8 (high): A vulnerability classified as critical was found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected by this vulnerability is the…
CVE-2024-10283 — CVSS 8.8 (high): A vulnerability, which was classified as critical, has been found in Tenda RX9 and RX9 Pro 22.03.02.20. Affected by this issue is the…
CVE-2024-10281 — CVSS 8.8 (high): A vulnerability classified as critical has been found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected is the function sub_42EEE0…
CVE-2023-43885 — CVSS 8.1 (high): Missing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows authenticated attackers to arbitrarily…
CVE-2023-43886 — CVSS 7.1 (high): A buffer overflow in the HTTP server component of Tenda RX9 Pro v22.03.02.20 might allow an authenticated attacker to overwrite memory.