Tenda Tx9 Pro Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tenda Tx9 Pro Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2022-29591 — CVSS 9.8 (critical): Tenda TX9 Pro 22.03.02.10 devices have a SetNetControlList buffer overflow.
• CVE-2022-29592 — CVSS 9.8 (critical): Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route).
• CVE-2024-4114 — CVSS 8.8 (high): A vulnerability, which was classified as critical, has been found in Tenda TX9 22.03.02.10. This issue affects the function sub_42C014 of…
• CVE-2024-4111 — CVSS 8.8 (high): A vulnerability was found in Tenda TX9 22.03.02.10. It has been rated as critical. Affected by this issue is the function sub_42BD7C of the…
• CVE-2024-4112 — CVSS 8.8 (high): A vulnerability classified as critical has been found in Tenda TX9 22.03.02.10. This affects the function sub_42CB94 of the file…
• CVE-2024-4113 — CVSS 8.8 (high): A vulnerability classified as critical was found in Tenda TX9 22.03.02.10. This vulnerability affects the function sub_42D4DC of the file…
• CVE-2022-38510 — CVSS 7.8 (high): Tenda_TX9pro V22.03.02.10 was discovered to contain a buffer overflow via the component httpd/SetNetControlList.
• CVE-2022-45337 — CVSS 7.5 (high): Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
• CVE-2022-30033 — CVSS 7.5 (high): Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in httpd module.