https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10351.htmlhttps://patchthecve.com/cve/CVE-2024-10351.htmlWed, 17 Jun 2026 06:55:27 +0000HIGH 8.8: A vulnerability was found in Tenda RX9 Pro 22.03.02.20. It has been rated as critical. This issue affects the function sub_424CE0 of the file /goform/setMacFilterCfg of the component POST Request Handler. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack mahttps://patchthecve.com/cve/CVE-2024-10283.htmlhttps://patchthecve.com/cve/CVE-2024-10283.htmlWed, 17 Jun 2026 06:55:20 +0000HIGH 8.8: A vulnerability, which was classified as critical, has been found in Tenda RX9 and RX9 Pro 22.03.02.20. Affected by this issue is the function sub_4337EC of the file /goform/SetNetControlList. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be launched remohttps://patchthecve.com/cve/CVE-2024-10282.htmlhttps://patchthecve.com/cve/CVE-2024-10282.htmlWed, 17 Jun 2026 06:55:19 +0000HIGH 8.8: A vulnerability classified as critical was found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected by this vulnerability is the function sub_42EA38 of the file /goform/SetVirtualServerCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack can be launchedhttps://patchthecve.com/cve/CVE-2024-10281.htmlhttps://patchthecve.com/cve/CVE-2024-10281.htmlWed, 17 Jun 2026 06:55:19 +0000HIGH 8.8: A vulnerability classified as critical has been found in Tenda RX9 and RX9 Pro 22.03.02.10/22.03.02.20. Affected is the function sub_42EEE0 of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to launch the attack remotely.https://patchthecve.com/cve/CVE-2023-43886.htmlhttps://patchthecve.com/cve/CVE-2023-43886.htmlWed, 17 Jun 2026 06:26:38 +0000HIGH 7.1: A buffer overflow in the HTTP server component of Tenda RX9 Pro v22.03.02.20 might allow an authenticated attacker to overwrite memory.https://patchthecve.com/cve/CVE-2023-43885.htmlhttps://patchthecve.com/cve/CVE-2023-43885.htmlWed, 17 Jun 2026 06:26:37 +0000HIGH 8.1: Missing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows authenticated attackers to arbitrarily lock the device.