Improper Network Isolation in Tenda RX2 Pro Devices

CVE-2025-46635

Summary

An issue has been identified in Tenda RX2 Pro devices where improper network isolation exists between the guest Wi-Fi network and other network interfaces. This flaw allows an authenticated attacker on the guest Wi-Fi to potentially gain access to sensitive resources on the router and devices on other connected networks. By configuring a static IP address within the non-guest subnet, the attacker can breach the intended security boundaries and exploit available network resources.

References