CVE-2025-1895: high-severity vulnerability in Tenda TX3
Tenda TX3 setMacFilterCfg buffer overflow
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.1epss 0.9%
A vulnerability classified as critical has been found in Tenda TX3 16.03.13.11_multi. This affects an unknown part of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
Tenda · TX3Related CVEs — Tenda TX3
In the same product, most dangerous first.
CVE-2025-1897HIGHTenda TX3 SetNetControlList buffer overflowEPSS 1.2%CVE-2025-8958HIGHTenda TX3 fast_setting_wifi_set stack-based overflowEPSS 0.9%CVE-2025-1898HIGHTenda TX3 openSchedWifi buffer overflowEPSS 0.9%CVE-2025-1896HIGHTenda TX3 SetStaticRouteCfg buffer overflowEPSS 0.9%CVE-2026-2137HIGHTenda TX3 SetIpMacBind buffer overflowEPSS 0.8%CVE-2026-19750CRITICALTenda CH/CP/TX3 SSH hard-coded passwordEPSS 0.8%