CVE-2023-43885

8.1 highEPSS 0.7%

High (8.1) in tenda rx9 pro firmware. EPSS 0.7% chance of exploitation in the next 30 days.

Missing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows authenticated attackers to arbitrarily lock the device.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2023-11-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tenda:rx9_pro_firmware

References

https://blog.rtlcopymemory.com/tenda-rx9-pro/
https://blog.rtlcopymemory.com/tenda-rx9-pro/

Check your stack JSON