Tenda RX2 Pro Firmware vulnerabilities

11 CVEs affecting Tenda RX2 Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-46635, published 2025-05-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-46631, published 2025-05-01. Medium severity, CVSS 6.5. EPSS: 7.5% chance of exploitation in the next 30 days. Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sending a /goform/telnet…
CVE-2025-46628, published 2025-05-01. High severity, CVSS 7.3. EPSS: 1% chance of exploitation in the next 30 days. Lack of input validation/sanitization in the 'ate' management service in the Tenda RX2 Pro 16.03.30.14 allows an unauthorized remote attacker to gain root shell access to the device by sending a…
CVE-2025-46629, published 2025-05-01. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Lack of access controls in the 'ate' management binary of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to perform unauthorized configuration changes for any router where…
CVE-2025-46625, published 2025-05-01. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2 Pro 16.03.30.14 allows a remote attacker that is authorized to the web management portal to gain root…
CVE-2025-46627, published 2025-05-01. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. Use of weak credentials in the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated attacker to authenticate to the telnet service by calculating the root password based on easily-obtained device…
CVE-2025-46630, published 2025-05-01. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable 'ate' (a remote system management binary) by sending a…
CVE-2025-46635, published 2025-05-01. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. An issue was discovered on Tenda RX2 Pro 16.03.30.14 devices. Improper network isolation between the guest Wi-Fi network and other network interfaces on the router allows an attacker (who is…
CVE-2025-46632, published 2025-05-01. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an attacker to discern information about or more easily decrypt encrypted messages between…
CVE-2025-46633, published 2025-05-01. High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days. Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the…
CVE-2025-46626, published 2025-05-01. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Reuse of a static AES key and initialization vector for encrypted traffic to the 'ate' management service of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt, replay, and/or forge traffic…

Latest

CVE-2025-46634, published 2025-05-01. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an unauthenticated attacker to authenticate to the web management portal by…