CVE-2025-44900: Tenda RX3 Firmware

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In Tenda RX3 V1.0br_V16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the manipulation of the parameter mac leads to stack overflow.

Affected products

• Tenda RX3 Firmware: version 16.03.13.11_multi only

Published 2025-05-06. Last modified 2026-06-17.