CVE-2023-43885

Missing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows authenticated attackers to arbitrarily lock the device.

Score

CVSS 3.1 8.1 High

Status

Modified - cve@mitre.org

Published

2023-11-07

Last modified

2024-09-05

Weaknesses

CWE-862

Affected products

• Rx9 Pro Firmware (Tenda)

References

• https://blog.rtlcopymemory.com/tenda-rx9-pro/