VYPR
← All advisories
High severity8.8NVD Advisory· Published Oct 23, 2024· Updated Jun 17, 2026

CVE-2024-10281

CVE-2024-10281

Description

A vulnerability classified as critical has been found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected is the function sub_42EEE0 of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

6
  • Tenda/RX9llm-fuzzy2 versions
    = 22.03.02.10/22.03.02.20+ 1 more
    • (no CPE)range: = 22.03.02.10/22.03.02.20
    • (no CPE)range: 22.03.02.10
  • Tenda/RX9 Prollm-fuzzy
    Range: = 22.03.02.10/22.03.02.20
  • Tenda/RX2 Procpe-rescue
    Range: 22.03.02.10
  • Tenda/Rx9 Pro Firmware2 versions
    cpe:2.3:o:tenda:rx9_pro_firmware:22.03.02.10:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:tenda:rx9_pro_firmware:22.03.02.10:*:*:*:*:*:*:*
    • cpe:2.3:o:tenda:rx9_pro_firmware:22.03.02.20:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.