Vulnary
← back to the feed
Critical· 9.8

CVE-2024-51312

A stack overflow vulnerability exists in the firmware of the Tenda TX9 router. This flaw occurs within a specific function used to configure static routes.

publishedJul 20, 2026
last modifiedJul 21, 2026
sourcesNVD
severity · cvss
9.8
critical · how bad it is
exploitation · epss
<1%
34th percentile · chance of exploitation in 30 days
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →
auto-deletes from the system
counting…on Sep 4, 2026

No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.

01

Who is affected

Users of the Tenda TX9 router running firmware version V22.03.02.20.

02

Real-world impact

An attacker could potentially gain unauthorized control over the device or cause it to crash by sending specially crafted data to the router.

03

Why this severity

This vulnerability is rated critical because it can be exploited remotely over a network without requiring any user interaction or authentication, potentially leading to a total loss of confidentiality, integrity, and availability.

04

What to do about it

no official fix yet

No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.

No fix documented in sources

05

Timeline

06

How it’s attacked

Attack vectorNetwork (remote)
Attack complexityLow
Privileges requiredNone
User interactionNone needed
ScopeUnchanged
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
07

References & advisories

(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →