VULNERABILITY INTELLIGENCE

CVE-2025-46629

CVSS score6.5 MEDIUM
EPSS probability0.87%
CISA KEVNot currently listed
Published2025-05-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

Lack of access controls in the 'ate' management binary of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to perform unauthorized configuration changes for any router where 'ate' has been enabled by sending a crafted UDP packet

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-284

Primary references