Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:rx9_pro_firmware:22.03.02.10:*:*:*:*:*:*:*

part: o version: 22.03.02.10 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductRx9 Pro Firmware (b87ef5ca-ed09-5f37-aab7-152c76cc94d6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10282 vulnerable 2026-06-08 06:22:03.942233 Tenda RX9/RX9 Pro SetVirtualServerCfg sub_42EA38 stack-based overflow
HIGH (8.8)
A vulnerability classified as critical was found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected by this vulnerability is the function sub_42EA38 of the file /goform/SetVirtualServerCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-23T14:31:24.051Z
Updated: 2024-10-23T17:51:56.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10281 vulnerable 2026-06-08 06:22:03.940611 Tenda RX9/RX9 Pro SetStaticRouteCfg sub_42EEE0 stack-based overflow
HIGH (8.8)
A vulnerability classified as critical has been found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected is the function sub_42EEE0 of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-10-23T14:00:24.603Z
Updated: 2024-10-23T18:20:52.773Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43886 vulnerable 2026-06-08 06:12:38.144902 Details available
A buffer overflow in the HTTP server component of Tenda RX9 Pro v22.03.02.20 might allow an authenticated attacker to overwrite memory.
Published: 2023-11-07T00:00:00.000Z
Updated: 2024-09-05T13:15:21.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43885 vulnerable 2026-06-08 06:12:38.143473 Details available
Missing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows authenticated attackers to arbitrarily lock the device.
Published: 2023-11-07T00:00:00.000Z
Updated: 2024-09-05T13:17:13.925Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38831 vulnerable 2026-06-08 05:47:17.449357 Details available
Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList
Published: 2022-09-16T14:35:43.000Z
Updated: 2024-08-03T11:02:14.625Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38830 vulnerable 2026-06-08 05:47:17.448817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38829 vulnerable 2026-06-08 05:47:17.447685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.