Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:rx3_firmware:16.03.13.11_multi:*:*:*:*:*:*:*

part: o version: 16.03.13.11_multi update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductRx3 Firmware (086d990c-6cbe-5a97-ad71-b1fd1886dec4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5527 vulnerable 2026-06-08 07:37:25.101016 Tenda RX3 SetStaticRouteCfg save_staticroute_data stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda RX3 16.03.13.11_multi_TDE01. It has been rated as critical. This issue affects the function save_staticroute_data of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-03T20:31:06.838Z
Updated: 2025-06-04T13:55:16.897Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4357 vulnerable 2026-06-08 07:29:16.094209 Tenda RX3 telnet command injection
MEDIUM (4.7)
A vulnerability was found in Tenda RX3 16.03.13.11_multi. It has been rated as critical. This issue affects some unknown processing of the file /goform/telnet. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-06T13:31:07.818Z
Updated: 2025-05-06T14:39:36.483Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44900 vulnerable 2026-06-08 07:25:10.885460 Details available
In Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the manipulation of the parameter mac leads to stack overflow.
Published: 2025-05-06T00:00:00.000Z
Updated: 2025-05-06T20:30:35.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44899 vulnerable 2026-06-08 07:25:10.884295 Details available
There is a stack overflow vulnerability in Tenda RX3 V1.0br_V16.03.13.11 In the fromSetWifiGusetBasic function of the web url /goform/ WifiGuestSet, the manipulation of the parameter shareSpeed leads to stack overflow.
Published: 2025-05-06T00:00:00.000Z
Updated: 2025-05-07T13:19:24.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3259 vulnerable 2026-06-08 07:23:08.554638 Tenda RX3 SetOnlineDevName formSetDeviceName stack-based overflow
HIGH (8.8)
A vulnerability, which was classified as critical, has been found in Tenda RX3 16.03.13.11. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-04T17:31:06.694Z
Updated: 2025-04-04T18:55:17.132Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.