high8.8
CVE-2023-47422
An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 a…
Impact
An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tenda | Tx9 Firmware | Version 22.03.02.54 |
| Tenda | Ax3 Firmware | Version 16.03.12.11 |
| Tenda | Ax9 Firmware | Version 22.03.01.46 |
| Tenda | Ax12 Firmware | Version 22.03.01.46 |