Buffer Overflow Vulnerability in Tenda RX3 Router

CVE-2025-29357

Summary

The Tenda RX3 router is susceptible to a buffer overflow vulnerability through the startIp and endIp parameters within the /goform/SetPptpServerCfg endpoint. Attackers can exploit this weakness by sending specially crafted packets, potentially leading to a Denial of Service (DoS) condition. This could disrupt network services, rendering affected devices unresponsive. It's critical for users to apply necessary patches and mitigate the associated security risks.

References