Tenda AX2 Pro Firmware vulnerabilities

2 CVEs affecting Tenda AX2 Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-48459, published 2024-10-25.

More from Tenda.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-48459, published 2024-10-25. High severity, CVSS 7.3. EPSS: 8.5% chance of exploitation in the next 30 days. A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jixiang Tenda) v.DI_7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An…
• CVE-2024-40515, published 2024-07-16. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. An issue in SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro V16.03.29.48_cn allows a remote attacker to execute arbitrary code via the Routing functionality.