Tenda RX9 Pro Firmware vulnerabilities

9 CVEs affecting Tenda RX9 Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-10351, published 2024-10-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-10282, published 2024-10-23. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected by this vulnerability is the function sub_42EA38 of the file /goform/SetVirtualServerCfg.…
CVE-2022-38831, published 2022-09-16. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList
CVE-2022-38830, published 2022-09-16. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status.
CVE-2022-38829, published 2022-09-16. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg.
CVE-2024-10281, published 2024-10-23. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected is the function sub_42EEE0 of the file /goform/SetStaticRouteCfg. The manipulation of…
CVE-2024-10283, published 2024-10-23. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Tenda RX9 and RX9 Pro 22.03.02.20. Affected by this issue is the function sub_4337EC of the file /goform/SetNetControlList. The…
CVE-2024-10351, published 2024-10-25. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was found in Tenda RX9 Pro 22.03.02.20. It has been rated as critical. This issue affects the function sub_424CE0 of the file /goform/setMacFilterCfg of the component POST Request…
CVE-2023-43885, published 2023-11-07. High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days. Missing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows authenticated attackers to arbitrarily lock the device.
CVE-2023-43886, published 2023-11-07. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. A buffer overflow in the HTTP server component of Tenda RX9 Pro v22.03.02.20 might allow an authenticated attacker to overwrite memory.