Buffer Overflow in Tenda RX3 Firewall Configuration
CVE-2025-29358
7.5HIGH
Summary
The Tenda RX3 router is susceptible to a buffer overflow vulnerability through the firewallEn parameter in the /goform/SetFirewallCfg endpoint. Exploiting this security flaw allows attackers to send specially crafted packets, leading to a potential Denial of Service (DoS) attack, disrupting service availability for users. It is crucial for users to apply necessary updates and implement security measures to protect their networks from such vulnerabilities.
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved