Insecure Permissions Vulnerability in Tenda CP3 Pro Firmware
CVE-2025-52364
7.5HIGH
What is CVE-2025-52364?
The Tenda CP3 Pro Firmware V22.5.4.93 contains an insecure permissions vulnerability that permits the telnet service to be enabled by default during the boot process. This situation creates an opportunity for remote attackers to access the device's shell over the network. If default or weak credentials are employed, attackers may connect without authentication, exposing the device to potential unauthorized access and command execution.