CVE Feed

    Dashboard / CVE / CVE-2025-52364

    CVE-2025-52364

    Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if default or weak credentials are present

    Published:Jul 9, 2025
    Last Modified:Aug 7, 2025
    EPS:Jul 9, 2025
    EPSS Score:0.00219
    CVSS Score:7.5

    Affected Products

    Vendor
    Tenda
    Product
    Cp3 Pro
    Vendor
    Tenda
    Product
    Cp3 Pro Firmware

    Exploits

    https://cybermaya.in/posts/Post-40/

    Common Weakness Enumeration

    CWE-1391 Use of Weak Credentials

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High