Approved changes feed: RSS · Atom
cpe:2.3:a:tenda:rx3:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Rx3 (c4654bcc-38e6-5ea9-b89d-31ba3f82fa7b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-5527 |
vulnerable | 2026-06-08 07:37:25.099953 |
Tenda RX3 SetStaticRouteCfg save_staticroute_data stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda RX3 16.03.13.11_multi_TDE01. It has been rated as critical. This issue affects the function save_staticroute_data of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-03T20:31:06.838Z
Updated: 2025-06-04T13:55:16.897Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4357 |
vulnerable | 2026-06-08 07:29:16.093452 |
Tenda RX3 telnet command injection
MEDIUM (4.7)
A vulnerability was found in Tenda RX3 16.03.13.11_multi. It has been rated as critical. This issue affects some unknown processing of the file /goform/telnet. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-06T13:31:07.818Z
Updated: 2025-05-06T14:39:36.483Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3259 |
vulnerable | 2026-06-08 07:23:08.553881 |
Tenda RX3 SetOnlineDevName formSetDeviceName stack-based overflow
HIGH (8.8)
A vulnerability, which was classified as critical, has been found in Tenda RX3 16.03.13.11. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-04T17:31:06.694Z
Updated: 2025-04-04T18:55:17.132Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.