Tenda TX9 Pro Firmware vulnerabilities
9 CVEs affecting Tenda TX9 Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-4114, published 2024-04-24.
More from Tenda.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2022-29592, published 2022-05-05. Critical severity, CVSS 9.8. EPSS: 20.1% chance of exploitation in the next 30 days. Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route).
- CVE-2024-4112, published 2024-04-24. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in Tenda TX9 22.03.02.10. This affects the function sub_42CB94 of the file /goform/SetVirtualServerCfg. The manipulation of the argument list…
- CVE-2024-4113, published 2024-04-24. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Tenda TX9 22.03.02.10. This vulnerability affects the function sub_42D4DC of the file /goform/SetSysTimeCfg. The manipulation of the argument time…
- CVE-2024-4111, published 2024-04-24. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability was found in Tenda TX9 22.03.02.10. It has been rated as critical. Affected by this issue is the function sub_42BD7C of the file /goform/SetLEDCfg. The manipulation of the argument…
- CVE-2022-29591, published 2022-05-10. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Tenda TX9 Pro 22.03.02.10 devices have a SetNetControlList buffer overflow.
- CVE-2024-4114, published 2024-04-24. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Tenda TX9 22.03.02.10. This issue affects the function sub_42C014 of the file /goform/PowerSaveSet. The manipulation of the…
- CVE-2022-30033, published 2022-05-18. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in httpd module.
- CVE-2022-45337, published 2022-11-30. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
- CVE-2022-38510, published 2022-08-29. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Tenda_TX9pro V22.03.02.10 was discovered to contain a buffer overflow via the component httpd/SetNetControlList.