CVE-2023-43885: Tenda RX9 Pro Firmware

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Missing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows authenticated attackers to arbitrarily lock the device.

Affected products

• Tenda RX9 Pro Firmware: version 22.03.02.10 only

Published 2023-11-07. Last modified 2026-06-17.