CVE-2023-30354: Tenda CP3 Firmware

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot password can be inserted for console access.

Affected products

• Tenda CP3 Firmware: version 11.10.00.2211041355 only

Published 2023-05-10. Last modified 2026-06-17.