📦 Rx3 Firmware

by Tenda

🔍 What is Rx3 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-5527

HIGH CVSS 8.8 Jun 3, 2025

This critical vulnerability in Tenda RX3 routers allows remote attackers to execute arbitrary code via a stack-based buffer overflow in the SetStaticRouteCfg function. Attackers can exploit this witho...

CVE-2025-3259

HIGH CVSS 8.8 Apr 4, 2025

A critical stack-based buffer overflow vulnerability in Tenda RX3 routers allows remote attackers to execute arbitrary code by sending specially crafted requests to the /goform/SetOnlineDevName endpoi...

CVE-2025-29363

HIGH CVSS 7.5 Mar 13, 2025

Tenda RX3 routers running vulnerable firmware are susceptible to a buffer overflow attack via the schedStartTime and schedEndTime parameters in the /goform/saveParentControlInfo endpoint. This allows ...

CVE-2025-29357

HIGH CVSS 7.5 Mar 13, 2025

This buffer overflow vulnerability in Tenda RX3 routers allows attackers to cause denial of service by sending specially crafted packets to the PPTP server configuration endpoint. Attackers can crash ...

CVE-2025-29359

HIGH CVSS 7.5 Mar 13, 2025

Tenda RX3 routers running specific firmware versions contain a buffer overflow vulnerability in the deviceId parameter of the saveParentControlInfo endpoint. Attackers can exploit this to cause denial...

CVE-2025-29360

HIGH CVSS 7.5 Mar 13, 2025

Tenda RX3 routers running specific firmware versions contain a buffer overflow vulnerability in the time configuration function. Attackers can send specially crafted packets to cause denial of service...

CVE-2025-29361

HIGH CVSS 7.5 Mar 13, 2025

A buffer overflow vulnerability in Tenda RX3 routers allows attackers to cause denial of service via specially crafted packets sent to the /goform/SetVirtualServerCfg endpoint. This affects Tenda RX3 ...

CVE-2025-29362

HIGH CVSS 7.5 Mar 13, 2025

This buffer overflow vulnerability in Tenda RX3 routers allows attackers to cause denial of service by sending specially crafted packets to the web interface. It affects users running vulnerable firmw...

CVE-2025-44900

MEDIUM CVSS 6.5 May 6, 2025

This vulnerability allows remote attackers to execute arbitrary code on Tenda RX3 routers by exploiting a stack overflow in the GetParentControlInfo function. Attackers can send specially crafted requ...