PT-2025-18708 · Tenda · Tenda Rx2 Pro

Published 2025-05-01 · Updated 2025-05-27 · CVE-2025-46634

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Tenda RX2 Pro version 16.03.30.14

Description The web management portal of the Tenda RX2 Pro transmits sensitive information, including the hash of the user's password, in cleartext. This could allow an unauthenticated attacker to collect credentials from observed or collected traffic and use them to authenticate to the portal. Although the system implements encryption, it does so only after the user's password hash has been transmitted in cleartext, making the hash vulnerable to replay attacks for authentication purposes.

Recommendations For version 16.03.30.14, consider implementing full encryption for all communication, including the initial transmission of the password hash, to prevent eavesdropping and replay attacks. As a temporary workaround, restrict access to the web management portal to minimize the risk of exploitation.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2025-46634

Affected Products

Tenda Rx2 Pro

References · 9

• 🔥 https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46634-transmission-of-plaintext-credentials-in-httpd · Exploit
• https://osv.dev/vulnerability/CVE-2025-46634 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46634 · Security Note
• https://tendacn.com/us/default.html · Note
• https://t.me/cvedetector/24266 · Telegram Post
• https://twitter.com/syedaquib77/status/1919374818895675440 · Twitter Post
• https://twitter.com/CVEnew/status/1918745371401994560 · Twitter Post
• https://twitter.com/dailycve/status/1927389481415430357 · Twitter Post
• https://t.me/cvetracker/22870 · Telegram Post