CVE-2024-40515

Published: Jul 16, 2024Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro V16.03.29.48_cn allows a remote attacker to execute arbitrary code via the Routing functionality.

Affected (1)

Products: Tenda: Ax2 Pro Firmware

Tenda

1 product

Ax2 Pro Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tenda Ax2 Pro Firmware	Version 16.03.29.48_cn

Running on/with	Platform Versions
Tenda Ax2 Pro	All versions

Related CWEs

CWE-940

Improper Verification of Source of a Communication Channel

The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.

References (2)

https://gist.github.com/as-lky/410d6ae5c8ead88c2e0f5c641b2382ec

Source: cve@mitre.org

Third Party Advisory

https://gist.github.com/as-lky/410d6ae5c8ead88c2e0f5c641b2382ec

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.