CVE-2025-46631

Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sending a /goform/telnet web request...

CVE-2025-46631

creationtimestamp| type| source ---|---|--- 2025-05-01 22:01:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cptmzd42l 2025-05-01 23:12:29+00:00| published-proof-of-concept| https://t.me/cvedetector/24263 2025-05-02 15:16:55+00:00| published-proof-of-concept|...

CVE-2025-46631

Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sending a /goform/telnet web request...

CVE-2025-46631

Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sending a /goform/telnet web request...

CVE-2025-46631

CVE-2025-46631 concerns Tenda RX2 Pro (firmware 16.03.30.14). The issue is improper access controls in the web management portal that allow an unauthenticated remote attacker to enable telnet access to the router OS by sending a request to the vulnerable endpoint "/goform/telnet". This is support...