CVE-2025-11666 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file force_upgrade.sh of the component Firmware Update Handler.…
High CVSS: 8.4

CVE-2025-11666

A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file force_upgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument current_force_upgrade_pwd can lead to use of hard-coded password. The attack can only be executed locally. The exploit has been published and may be used.
Vendor
-
Product
-
CWE
CWE-255
Yayın Tarihi
2025-10-13 07:15:53
Güncelleme
2025-10-14 19:36:59
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-255 HIGH 2025

Referanslar

https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/RP3.md https://vuldb.com/?ctiid.328085 https://vuldb.com/?id.328085 https://vuldb.com/?submit.673128 https://www.tenda.com.cn/