Vendors / Tenda Records 1964 All Threatist records
Exploited (KEV) 3
CVSS critical 648
CVSS high 1091
Exploited now Tenda records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority HIGH 70
AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0 V22.03.01.46 were discovered to contain an authenticated remote command execution (RCE) vulnerability via the…
CVSS 3.1 HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.01522 · Published 2024-07-19 · No fix listed CWE-77
Priority MEDIUM 61
A security flaw has been discovered in Tenda AX9 22.03.01.46.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.0029 · Published 2025-12-13 · No fix listed CWE-327
Priority MEDIUM 53
Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02411 · Published 2023-12-07 · No fix listed CWE-89
Priority MEDIUM 51
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00925 · Published 2023-12-07 · No fix listed CWE-787
Priority MEDIUM 47
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02408 · Published 2023-12-07 · No fix listed CWE-77
Priority MEDIUM 47
Tenda AX9 V22.03.01.46 is vulnerable to command injection.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02408 · Published 2023-12-07 · No fix listed CWE-77
Priority MEDIUM 47
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02411 · Published 2023-12-07 · No fix listed CWE-77
Priority MEDIUM 44
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00924 · Published 2023-12-07 · No fix listed CWE-787
Priority MEDIUM 44
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00924 · Published 2023-12-07 · No fix listed CWE-787
Priority MEDIUM 44
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00925 · Published 2023-12-07 · No fix listed CWE-787
Priority MEDIUM 41
An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via…
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00491 · Published 2024-02-20 · No fix listed CWE-284
Open these records in search → All records by CVSS severity
648 1091 217 8 0
THREATIST.IORead the docs