PatchTheCVEax12 firmware vulnerabilities and fixes
Recent CVEs affecting ax12 firmware, with upgrade or downgrade steps. 5 tracked.
Also searched as: ax12firmware.
ax12 firmware has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-03-20. Highest priority: CVE-2024-39963 (score 52/100).
- CVE-2025-29215 MEDIUM 6.5 MITIGATE Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_43fdcc function at /goform/S
- CVE-2025-29214 HIGH 7.5 MITIGATE Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_42F69C function at /goform/s
- CVE-2024-40503 MEDIUM 6.5 MITIGATE An issue in Tenda AX12 v.16.03.49.18_cn+ allows a remote attacker to cause a denial of service via the Routing
- CVE-2024-40412 MEDIUM 6.8 MITIGATE Tenda AX12 v1.0 v22.03.01.46 contains a stack overflow in the deviceList parameter of the sub_42E410 function.
- CVE-2024-39963 HIGH 8.0 MITIGATE MITIGATE AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0
FAQ
How do I fix ax12 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ax12 firmware being exploited right now?
None of the tracked ax12 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ax12 firmware CVE should I patch first?
CVE-2024-39963 currently ranks highest (52/100): AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0.