Weak Credential Vulnerability in Tenda RX2 Pro Router by Tenda

CVE-2025-46627

Summary

The Tenda RX2 Pro Router is vulnerable due to the use of easily guessed credentials based on the last two digits of the device's MAC address. This design flaw allows unauthorized individuals to gain access to the telnet service without proper authentication. Attackers can exploit this vulnerability by simply calculating the root password using publicly accessible device information, creating a significant risk for users' network security.

References