CVE-2025-11666

A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file forceupgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument currentforceupgradepwd can lead to use of hard-coded password. The attack can only be executed...

CVE-2025-11666

CVE-2025-11666 affects Tenda RP3 Pro firmware up to version 22.5.7.93. The vulnerability resides in the Firmware Update Handler’s force_upgrade.sh, where manipulating the current_force_upgrade_pwd argument can trigger use of a hard-coded password. Local attack required. Public exploit exists. Rem...

Tenda RP3 Pro 安全漏洞

Tenda RP3 Pro is an indoor wireless PTZ camera from Tenda China. A security vulnerability exists in Tenda RP3 Pro version 22.5.7.93 and earlier, which originates from a hard-coded password in the parameter currentforceupgradepwd in the file forceupgrade.sh, which could lead to a local attack...