CVE-2023-47422: Tenda AX12 Firmware

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL.

Affected products

• Tenda AX12 Firmware: version 22.03.01.46 only
• Tenda AX3 Firmware: version 16.03.12.11 only
• Tenda AX9 Firmware: version 22.03.01.46 only
• Tenda TX9 Firmware: version 22.03.02.54 only

Published 2024-02-20. Last modified 2026-06-17.