Vendors / Tenda Records 1964 All Threatist records
Exploited (KEV) 3 In CISA KEV
CVSS critical 648 CVSS 9.0–10.0
CVSS high 1091 CVSS 7.0–8.9
Exploited now Tenda records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority HIGH 71
A vulnerability, which was classified as critical, has been found in Tenda RX9 and RX9 Pro 22.03.02.20.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.009 · Published 2024-10-23 · No fix listed CWE-121
Priority HIGH 71
A vulnerability classified as critical was found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01201 · Published 2024-10-23 · No fix listed CWE-121
Priority HIGH 71
A vulnerability classified as critical has been found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00994 · Published 2024-10-23 · No fix listed CWE-121
Priority MEDIUM 44
Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01174 · Published 2022-09-16 · No fix listed CWE-120
Priority MEDIUM 44
Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01174 · Published 2022-09-16 · No fix listed CWE-120
Priority MEDIUM 44
Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01174 · Published 2022-09-16 · No fix listed CWE-120
Priority MEDIUM 41
A vulnerability was found in Tenda RX9 Pro 22.03.02.20.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.0087 · Published 2024-10-24 · No fix listed CWE-121
Priority LOW 37
Missing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows authenticated attackers to arbitrarily lock the device.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00787 · Published 2023-11-07 · No fix listed CWE-862
Priority LOW 33
A buffer overflow in the HTTP server component of Tenda RX9 Pro v22.03.02.20 might allow an authenticated attacker to overwrite memory.
CVSS 3.1 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00762 · Published 2023-11-07 · No fix listed CWE-787
Open these records in search → All records by CVSS severity
Critical648 High1091 Medium217 Low8 No CVSS0