What’s Vulnerable › Vulnerabilities
CVE-2024-48459
- Severity: high (CVSS 7.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 8.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-10-25 · updated 2026-06-17
- Weakness: CWE-78
Description
A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jixiang Tenda) v.DI_7003G-19.12.24A1V16.03.29.50;V16.03.29.50;V16.03.29.50. An attacker can exploit this vulnerability by constructing a malicious payload to execute commands and further obtain shell access to the router's file system with the highest privileges.
Affected products
- Tenda Ax2 Pro Firmware: 16.03.29.50, 16.03.29.48, 16.03.29.45, 16.03.29.36, 16.03.29.33, 16.03.29.30
References
Get alerted when CVE-2024-48459 or the next vulnerability affects your stack