CVE-2024-11650

7.1 highEPSS 1.3%

High (7.1) in tenda i9 firmware. EPSS 1.3% chance of exploitation in the next 30 days.

A vulnerability was found in Tenda i9 1.0.0.8(3828) and classified as critical. This issue affects the function websReadEvent of the file /goform/GetIPTV. The manipulation leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

7.1 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWEs: CWE-476, CWE-404
Published: 2024-11-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tenda:i9_firmware

References

https://github.com/xiaobor123/tenda-vul-i9
https://vuldb.com/?ctiid.285971
https://vuldb.com/?id.285971
https://vuldb.com/?submit.446592
https://www.tenda.com.cn/

Check your stack JSON