CVE-2023-43886

A buffer overflow in the HTTP server component of Tenda RX9 Pro v22.03.02.20 might allow an authenticated attacker to overwrite memory.
References
Link Resource
https://blog.rtlcopymemory.com/tenda-rx9-pro/ Exploit Technical Description Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:rx9_pro_firmware:22.03.02.10:*:*:*:*:*:*:*
cpe:2.3:h:tenda:rx9_pro:-:*:*:*:*:*:*:*

History

16 Nov 2023, 16:05

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.1
References () https://blog.rtlcopymemory.com/tenda-rx9-pro/ - () https://blog.rtlcopymemory.com/tenda-rx9-pro/ - Exploit, Technical Description, Third Party Advisory
CPE cpe:2.3:o:tenda:rx9_pro_firmware:22.03.02.10:*:*:*:*:*:*:*
cpe:2.3:h:tenda:rx9_pro:-:*:*:*:*:*:*:*
CWE CWE-787
First Time Tenda
Tenda rx9 Pro Firmware
Tenda rx9 Pro

07 Nov 2023, 12:14

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-07 08:15

Updated : 2024-02-28 20:33


NVD link : CVE-2023-43886

Mitre link : CVE-2023-43886

CVE.ORG link : CVE-2023-43886


JSON object : View

Products Affected

tenda

  • rx9_pro_firmware
  • rx9_pro
CWE
CWE-787

Out-of-bounds Write