CVE-2024-48459: Tenda AX2 Pro Firmware

High severity, CVSS 7.3. EPSS: 8.5% chance of exploitation in the next 30 days.

A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jixiang Tenda) v.DI_7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An attacker can exploit this vulnerability by constructing a malicious payload to execute commands and further obtain shell access to the router's file system with the highest privileges.

Affected products

• Tenda AX2 Pro Firmware: version 16.03.29.50 only; version 16.03.29.48 only; version 16.03.29.45 only; version 16.03.29.36 only; version 16.03.29.33 only; version 16.03.29.30 only

Published 2024-10-25. Last modified 2026-06-17.