CVE-2025-29357

CVE-2025-29357 affects the Tenda RX3 router. The vulnerability is a buffer overflow in /goform/SetPptpServerCfg triggered by the startIp/endIp parameters, allowing a crafted packet DoS. A PoC is noted in the records; no concrete remediation details are provided in the supplied documents.

CVE-2025-29362

CVE-2025-29362 affects Tenda RX3 (US_RX3V1.0br_V16.03.13.11_multi_TDE01). The vulnerability is a buffer overflow in the /goform/setPptpUserList endpoint via the list parameter, allowing an attacker to trigger a Denial of Service with a crafted packet. No details about exploitation methods beyond ...

CVE-2025-29358

The CVE-2025-29358 entry concerns the Tenda RX3 router. A buffer overflow in the firewallEn parameter of the /goform/SetFirewallCfg endpoint can be exploited to cause a Denial of Service via a crafted packet. The advisory notes a CVSS v3.1 base score of 7.5 (HIGH) with network access, no privileg...