High severity8.8NVD Advisory· Published Oct 23, 2024· Updated Jun 17, 2026

CVE-2024-10283

Description

A vulnerability, which was classified as critical, has been found in Tenda RX9 and RX9 Pro 22.03.02.20. Affected by this issue is the function sub_4337EC of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

Tenda/Rx9 Pro Firmware
cpe:2.3:o:tenda:rx9_pro_firmware:22.03.02.20:*:*:*:*:*:*:*
Tenda/RX9 Prollm-fuzzy
Range: =22.03.02.20
Tenda/RX9llm-fuzzy2 versions
=22.03.02.20+ 1 more
- (no CPE)range: =22.03.02.20
- (no CPE)range: 22.03.02.20
Tenda/RX2 Procpe-rescue
Range: 22.03.02.20

Patches

Vulnerability mechanics

References

vuldb.comnvdThird Party AdvisoryVDB Entry
gitee.com/GXB0_0/iot-vul/blob/master/Tenda/RX9/20/SetNetControlList.mdnvdPermissions Required
vuldb.comnvdPermissions RequiredVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry
www.tenda.com.cnnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000