CVE-2023-47422
High
Description
An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL.
SeverityHigh
CVSS8.8
Exploit probability—
ProductTenda Ax12 Firmware
PublishedFeb 20, 2024
First seenFeb 20, 2024
Weakness typeCWE-284Improper access control
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tenda ax12_firmware | 22.03.01.46 | — |
| tenda tx9_firmware | 22.03.02.54 | — |
| tenda ax3_firmware | 16.03.12.11 | — |
| tenda ax9_firmware | 22.03.01.46 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.