CVE-2025-46625
Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2 Pro 16.03.30.14 allows a remote attacker that is authorized to the web management portal to gain root shell access to the device by sending a crafted web request. This is persistent because the command injection is saved in the configuration of the device.
- Score
- CVSS 3.1 8.8 High
- Status
- Analyzed - cve@mitre.org
- Published
- 2025-05-01
- Last modified
- 2025-05-02
- Weaknesses
- CWE-77
Affected products
References
- https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46625-command-injection-through-setlancfg…
- https://www.tendacn.com/us/default.html
