CVE-2025-46629

Medium CVSS: 6.5

Lack of access controls in the 'ate' management binary of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to perform unauthorized configuration changes for any router where 'ate' has been enabled by sending a crafted UDP packet

Vendor

Tenda

Product

Rx2 Pro Firmware

CWE

CWE-284

Yayın Tarihi

2025-05-01 20:15:38

Güncelleme

2025-05-27 14:24:23

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-284 Rx2 Pro Firmware MEDIUM Tenda 2025

Referanslar

https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46629-lack-of-authentication-in-ate https://www.tendacn.com/us/default.html

Benzer Kayıtlar

Medium

CVE-2026-5339

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function action_set_net_settings of the…

Medium

CVE-2026-5338

A security vulnerability has been detected in Tenda G103 1.0.0.5. The affected element is the function action_set_system…

High

CVE-2026-5204

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/we…

High

CVE-2026-5156

A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/Quick…

High

CVE-2026-5155

A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan o…

Medium

CVE-2026-5153

A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/Wr…