CVE-2024-39963

PoC —

CVSS 3.1

8.0 high

EPSS

2%p73

Published

Jul 19, 2024 (Jul 19, 2024)

Modified

Jun 17, 2026

Description

AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0 V22.03.01.46 were discovered to contain an authenticated remote command execution (RCE) vulnerability via the macFilterType parameter at /goform/setMacFilterCfg.

Vendors: tenda
Products: ax9 firmware, ax12 firmware
Weakness: CWE-77
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.