CVE-2025-46631

Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sending a /goform/telnet web request...

CVE-2025-46631

creationtimestamp| type| source ---|---|--- 2025-05-01 22:01:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cptmzd42l 2025-05-01 23:12:29+00:00| published-proof-of-concept| https://t.me/cvedetector/24263 2025-05-02 15:16:55+00:00| published-proof-of-concept|...

CVE-2025-46631

The Tenda RX2 Pro (version 16.03.30.14) is vulnerable to improper access controls within its web management portal. An unauthenticated remote attacker can send a web request to the /goform/telnet endpoint to enable telnet access to the router's operating system. Furthermore, deficiencies in the T...

CVE-2025-46631

Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sending a /goform/telnet web request...

CVE-2025-46631

Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sending a /goform/telnet web request...