CVE-2025-52364
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
The Tenda CP3 Pro router automatically enables telnet (an insecure remote access service) when it starts up, allowing attackers to connect to the device's control shell from the internet. If the device uses default or weak passwords, attackers can gain full control without proper protection.
The initialization script /etc/init.d/eth.sh enables telnetd by default at boot in firmware V22.5.4.93, exposing an unauthenticated or weakly-authenticated remote shell interface. Remote network attackers can establish telnet connections to execute arbitrary commands on the device, bypassing intended access controls due to insecure default permissions and service configuration.