CVE-2025-46627

CWE-9223 documents3 sources
Severity
8.2HIGH
EPSS
0.4%
top 40.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Tenda RX2 PRO Firmware
Timeline
PublishedMay 1
Latest updateMay 2

Description

Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to authenticate to the telnet service by calculating the root password based on easily-obtained device information. The password is based on the last two digits/octets of the MAC address.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:NExploitability: 3.9 | Impact: 4.2

Affected Packages1 packages

▶NVDtenda/rx2_pro_firmware16.03.30.14

🔴Vulnerability Details

2
GHSA
GHSA-w5qh-gchv-44g2: Use of weak credentials in the Tenda RX2 Pro 16↗2025-05-02
▶
CVEList
CVE-2025-46627: Use of weak credentials in the Tenda RX2 Pro 16↗2025-05-01
▶
CVE-2025-46627 (HIGH CVSS 8.2) | Use of weak credentials in the Tend | cvebase.io