CVE-2025-29362

Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/setPptpUserList. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2025-03-13

Last modified

2025-03-19

Weaknesses

CWE-120

Affected products

• Rx3 Firmware (Tenda)

References

• https://github.com/2664521593/mycve/blob/main/Tenda/RX3/tenda_rx3_bof_3.pdf