Improper Network Isolation in Tenda RX2 Pro Devices
CVE-2025-46635

7.1HIGH

Key Information:

Vendor

Tenda
Status
Tenda RX2 Pro
Vendor
CVE Published:
1 May 2025

What is CVE-2025-46635?

An issue has been identified in Tenda RX2 Pro devices where improper network isolation exists between the guest Wi-Fi network and other network interfaces. This flaw allows an authenticated attacker on the guest Wi-Fi to potentially gain access to sensitive resources on the router and devices on other connected networks. By configuring a static IP address within the non-guest subnet, the attacker can breach the intended security boundaries and exploit available network resources.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.tendacn.com/us/default.html
https://blog.uturn.dev/#/writeups/iot-village/tenda-w18e/...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.