CVE-2023-47422

Name of the Vulnerable Software and Affected Versions Tenda TX9 V1 version 22.03.02.54 Tenda AX3 V3 version 16.03.12.11 Tenda AX9 V1 version 22.03.01.46 Tenda AX12 V1 version 22.03.01.46

Description An access control issue in /usr/sbin/httpd allows attackers to bypass authentication on any endpoint via a crafted URL.

Recommendations For Tenda TX9 V1 version 22.03.02.54, update to a version that fixes the access control issue. For Tenda AX3 V3 version 16.03.12.11, update to a version that fixes the access control issue. For Tenda AX9 V1 version 22.03.01.46, update to a version that fixes the access control issue. For Tenda AX12 V1 version 22.03.01.46, update to a version that fixes the access control issue. As a temporary workaround, consider restricting access to the /usr/sbin/httpd endpoint until a patch is available.