High severity8.8NVD Advisory· Published Oct 23, 2024· Updated Jun 17, 2026

CVE-2024-10282

Description

A vulnerability classified as critical was found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected by this vulnerability is the function sub_42EA38 of the file /goform/SetVirtualServerCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

Tenda/Rx9 Pro Firmware2 versions
cpe:2.3:o:tenda:rx9_pro_firmware:22.03.02.10:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tenda:rx9_pro_firmware:22.03.02.10:*:*:*:*:*:*:*
- cpe:2.3:o:tenda:rx9_pro_firmware:22.03.02.20:*:*:*:*:*:*:*
Tenda/RX9 Prollm-fuzzy
Range: 22.03.02.10/22.03.02.20
Tenda/RX9llm-fuzzy2 versions
22.03.02.10/22.03.02.20+ 1 more
- (no CPE)range: 22.03.02.10/22.03.02.20
- (no CPE)range: 22.03.02.10
Tenda/RX2 Procpe-rescue
Range: 22.03.02.10

Patches

Vulnerability mechanics

References

vuldb.comnvdThird Party AdvisoryVDB Entry
gitee.com/GXB0_0/iot-vul/blob/master/Tenda/RX9/20/SetVirtualServerCfg.mdnvdPermissions Required
vuldb.comnvdPermissions RequiredVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry
www.tenda.com.cnnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000