CVE-2025-46626 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Reuse of a static AES key and initialization vector for encrypted traffic to the 'ate' management service of the Tenda RX2 Pro 16.03.30.14 allows an attacker to…
High CVSS: 7.3

CVE-2025-46626

Reuse of a static AES key and initialization vector for encrypted traffic to the 'ate' management service of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt, replay, and/or forge traffic to the service.
Vendor
Tenda
Product
Rx2 Pro Firmware
CWE
CWE-326
Yayın Tarihi
2025-05-01 20:15:38
Güncelleme
2025-05-27 14:22:51
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-326 Rx2 Pro Firmware HIGH Tenda 2025

Referanslar

https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46625-command-injection-through-setlancfg-in-httpd https://www.tendacn.com/us/default.html