CVE-2025-46627

Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to authenticate to the telnet service by calculating the root password based on easily-obtained device information. The password is based on the last two digits/octets of the MAC address...

CVE-2025-46627

The Tenda RX2 Pro router, specifically version 16.03.30.14 , contains a weak credentials vulnerability in its Telnet protocol implementation. An unauthenticated attacker can gain unauthorized access to the telnet service by calculating the root password , which is derived from the last two digits...

CVE-2025-46628

Lack of input validation/sanitization in the 'ate' management service in the Tenda RX2 Pro 16.03.30.14 allows an unauthorized remote attacker to gain root shell access to the device by sending a crafted UDP packet to the 'ate' service when it is enabled. Authentication is not needed...

CVE-2025-46628

The Tenda RX2 Pro router, specifically version 16.03.30.14 , is vulnerable to a remote code execution flaw due to a lack of input validation and sanitization in the 'ate' management service . An unauthorized remote attacker can gain root shell access without authentication by sending a crafted UD...

CVE-2025-46625

The Tenda RX2 Pro router, running firmware version 16.03.30.14 , contains an input validation error in the setLanCfg API endpoint of the httpd component. This vulnerability, categorized as Command Injection (CWE-77), allows a remote attacker with authorized access to the web management portal to ...

CVE-2025-46626

Reuse of a static AES key and initialization vector for encrypted traffic to the 'ate' management service of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt, replay, and/or forge traffic to the service...

CVE-2025-46626

The Tenda RX2 Pro (version 16.03.30.14) is vulnerable to a security bypass due to the reuse of a static AES key and initialization vector for encrypted traffic. This flaw specifically affects the 'ate' management service , potentially allowing an attacker to decrypt, replay, and/or forge traffic ...

CVE-2025-46629

Lack of access controls in the 'ate' management binary of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to perform unauthorized configuration changes for any router where 'ate' has been enabled by sending a crafted UDP packet...

CVE-2025-46633

Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in respons...

CVE-2025-46629

The Tenda RX2 Pro WiFi 6 signal amplifier, running firmware version 16.03.30.14 , is vulnerable to an Access Control Error (CWE-284). The root cause is a lack of access controls in the 'ate' management binary , which allows an unauthenticated remote attacker to perform unauthorized configuration ...

CVE-2025-46633

The Tenda RX2 Pro router, specifically version 16.03.30.14 , is vulnerable to an information disclosure flaw due to the cleartext transmission of sensitive information within its web management portal. The root cause involves the software sending the symmetric AES key in cleartext following a suc...

CVE-2025-46631

Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sending a /goform/telnet web request...

CVE-2025-46635

An issue was discovered on Tenda RX2 Pro 16.03.30.14 devices. Improper network isolation between the guest Wi-Fi network and other network interfaces on the router allows an attacker who is authenticated to the guest Wi-Fi to access resources on the router and/or resources and devices on other...

CVE-2025-46630

Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable 'ate' a remote system management binary by sending a /goform/ate web request...

CVE-2025-46635

The Tenda RX2 Pro (version 16.03.30.14 ) is vulnerable to a security bypass due to improper network isolation between the guest Wi-Fi network and other network interfaces. An authenticated guest Wi-Fi user can access router resources and devices on other hosted networks by configuring a static IP...

CVE-2025-46632

Initialization vector IV reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an attacker to discern information about or more easily decrypt encrypted messages between client and server...

CVE-2025-46632

The Tenda RX2 Pro router, specifically version 16.03.30.14 , contains an information disclosure vulnerability in its web management portal . The root cause is the repeated use of the Initialization Vector (IV) during the generation of cryptographic keys for the AES-128-CBC encryption algorithm. T...

CVE-2025-46626

Reuse of a static AES key and initialization vector for encrypted traffic to the 'ate' management service of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt, replay, and/or forge traffic to the service...

CVE-2025-46627

Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to authenticate to the telnet service by calculating the root password based on easily-obtained device information. The password is based on the last two digits/octets of the MAC address...

CVE-2025-46629

Lack of access controls in the 'ate' management binary of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to perform unauthorized configuration changes for any router where 'ate' has been enabled by sending a crafted UDP packet...