82 matches found
CVE-2025-52364
Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service telnetd by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if...
CVE-2025-52364
Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service telnetd by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if...
CVE-2025-52364
Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service telnetd by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if...
CVE-2025-52364
Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service telnetd by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if...
Tenda CP3 Pro 安全漏洞
Tenda CP3 Pro is a high quality security camera from Tenda China. A security vulnerability exists in Tenda CP3 Pro version V22.5.4.93, which originates from the default enablement of the telnet service and improper privileges, which may result in unauthorized access...
CVE-2025-52364
Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service telnetd by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if...
PT-2025-28897 · Tenda · Tenda Cp3 Pro
Name of the Vulnerable Software and Affected Versions: Tenda CP3 Pro version 22.5.4.93 Description: An insecure permissions issue exists in the Tenda CP3 Pro firmware. The telnet service telnetd is enabled by default during boot via the initialization script /etc/init.d/eth.sh. This allows remote...
CVE-2025-52364
CVE-2025-52364 affects Tenda CP3 Pro firmware 22.5.4.93. The issue is an insecure permissions configuration that leaves telnetd enabled by default at boot via /etc/init.d/eth.sh, allowing remote connection to the device shell over the network and potentially without authentication if default or w...
Tenda CP3 Command Injection Vulnerability
Tenda CP3 is a smart camera from Tenda, a Chinese company. A command injection vulnerability exists in Tenda CP3 version 11.10.00.2311090948, which stems from the failure of the function subF3C8C in the file apollo to correctly filter constructed command special characters, commands, and so on. A...
CVE-2025-5763
A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function subF3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public an...
CVE-2025-5763
A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function subF3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public an...
CVE-2025-5763
A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function subF3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public an...
CVE-2025-5763 Tenda CP3 apollo sub_F3C8C command injection
A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function subF3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public an...
CVE-2025-5763
The CVE-2025-5763 entry concerns Tenda CP3 (11.10.00.2311090948) where the function sub_F3C8C in the apollo file allows arbitrary command execution due to improper filtering. Exploitation is remote and the vulnerability is confirmed in multiple sources. Affected component: apollo -> sub_F3C8C;...
CVE-2025-5763 Tenda CP3 apollo sub_F3C8C command injection
A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function subF3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public an...
PT-2025-24101 · Tenda · Tenda Cp3
Name of the Vulnerable Software and Affected Versions: Tenda CP3 version 11.10.00.2311090948 Description: A critical issue has been found, affecting the function sub F3C8C of the file apollo, leading to command injection. The attack can be launched remotely. Recommendations: For Tenda CP3 version...
Tenda CP3 注入漏洞
Tenda CP3 is a smart camera from Tenda, a Chinese company. A command injection vulnerability exists in Tenda CP3 version 11.10.00.2311090948, which stems from the failure of the function subF3C8C in the file apollo to correctly filter constructed command special characters, commands, and so on. A...
CVE-2023-30354
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access...
CVE-2023-30352
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed...
CVE-2023-30351
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for root which is stored using weak encryption. This vulnerability allows attackers to connect to the TELNET service or UART by using the exposed credentials...