Lucene search
HistoryNov 07, 2023 - 8:15 a.m.
CVE-2023-43885
http server
tenda rx9 pro
firmware
authenticated attackers
device locking
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
AI Score
8
Confidence
High
EPSS
0
Percentile
15.6%
Missing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows authenticated attackers to arbitrarily lock the device.
Affected configurations
Node
tendarx9_proMatch-
tendarx9_pro_firmwareMatch22.03.02.10
| Vendor | Product | Version | CPE |
|---|---|---|---|
| tenda | rx9_pro | - | cpe:2.3:h:tenda:rx9_pro:-:*:*:*:*:*:*:* |
| tenda | rx9_pro_firmware | 22.03.02.10 | cpe:2.3:o:tenda:rx9_pro_firmware:22.03.02.10:*:*:*:*:*:*:* |
References
Related
cve
cve
CVE-2023-43885
2023-11-07 08:15:24
cvelist
cvelist
CVE-2023-43885
2023-11-07 00:00:00
prion
prion
Design/Logic Flaw
2023-11-07 08:15:00
vulnrichment
vulnrichment
CVE-2023-43885
2023-11-07 00:00:00
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
AI Score
8
Confidence
High
EPSS
0
Percentile
15.6%
Related for NVD:CVE-2023-43885