CVE-2024-39963

published 2024-07-19

CVE-2024-39963: AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0 V22.03.01.46 were discovered to contain an…

high 8 CVSS 3.1

AV A AC L PR L UI N S U C H I H A H

AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0 V22.03.01.46 were discovered to contain an authenticated remote command execution (RCE) vulnerability via the macFilterType parameter at /goform/setMacFilterCfg.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
tenda	ax12_firmware	—	—
tenda	ax9_firmware	—	—

CWE-77