Approved changes feed: RSS · Atom
cpe:2.3:h:tenda:ax9:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Ax9 (492af203-8a95-5a4e-907b-bbeaab1877f1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-14636 |
not_vulnerable | 2026-06-08 07:06:34.875999 |
Tenda AX9 httpd image_check weak hash
LOW (3.7)
A security flaw has been discovered in Tenda AX9 22.03.01.46. This affects the function image_check of the component httpd. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks.
Published: 2025-12-13T19:02:08.025Z
Updated: 2026-02-24T05:49:20.379Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39963 |
not_vulnerable | 2026-06-08 06:41:52.137351 |
Details available
AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0 V22.03.01.46 were discovered to contain an authenticated remote command execution (RCE) vulnerability via the macFilterType parameter at /goform/setMacFilterCfg.
Published: 2024-07-19T00:00:00.000Z
Updated: 2024-08-02T04:33:11.517Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49436 |
not_vulnerable | 2026-06-08 06:14:29.096698 |
Details available
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.
Published: 2023-12-07T00:00:00.000Z
Updated: 2024-08-02T21:53:45.412Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49435 |
not_vulnerable | 2026-06-08 06:14:29.096234 |
Details available
Tenda AX9 V22.03.01.46 is vulnerable to command injection.
Published: 2023-12-07T00:00:00.000Z
Updated: 2024-08-02T21:53:45.420Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49434 |
not_vulnerable | 2026-06-08 06:14:29.095768 |
Details available
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList.
Published: 2023-12-07T00:00:00.000Z
Updated: 2024-08-02T21:53:45.435Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49433 |
not_vulnerable | 2026-06-08 06:14:29.095236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49432 |
not_vulnerable | 2026-06-08 06:14:29.094822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49431 |
not_vulnerable | 2026-06-08 06:14:29.094487 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49430 |
not_vulnerable | 2026-06-08 06:14:29.094062 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49429 |
not_vulnerable | 2026-06-08 06:14:29.093675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.