{"metadata": {"vulnerability": "cve-2025-46625", "count": 24, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 17}}, "data": [{"timestamp": "2025-04-26T00:00:00Z", "date_only": false, "value": "2025-04-26T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-46625", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-05-01T00:00:00Z", "date_only": false, "value": "2025-05-01T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-46625", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-05-01T19:16:49.873Z", "date_only": false, "value": "2025-05-01T19:16:49.873Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2025-46625", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-01T20:15:38Z", "date_only": false, "value": "2025-05-01T20:15:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q25G-M88J-XMGX", "record": "GHSA-Q25G-M88J-XMGX", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-05-01T20:15:38.037Z", "date_only": false, "value": "2025-05-01T20:15:38.037000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202505-0400", "record": "VAR-202505-0400", "field": "sources_release_date.data.2.date"}, {"timestamp": "2025-05-01T20:15:38.037Z", "date_only": false, "value": "2025-05-01T20:15:38.037", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-46625", "record": "FKIE_CVE-2025-46625", "field": "published"}, {"timestamp": "2025-05-01T20:23:03.295Z", "date_only": false, "value": "2025-05-01T20:23:03.295303Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-46625", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-05-01T20:23:03.295Z", "date_only": false, "value": "2025-05-01T20:23:03.295303Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-46625", "record": "FKIE_CVE-2025-46625", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-01T22:01:11.446Z", "date_only": false, "value": "2025-05-01T22:01:11.446613Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cpttur72p", "record": "CVE-2025-46625", "field": "creation_timestamp", "uuid": "45ef03c6-abb4-4105-ba81-f9361513a769", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cpttur72p"}, {"timestamp": "2025-05-01T23:12:36Z", "date_only": false, "value": "2025-05-01T23:12:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/24268", "record": "CVE-2025-46625", "field": "creation_timestamp", "uuid": "1820d949-44c3-424c-abca-330afe61b9b3", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-46625 - Tenda RX2 Pro HTTPd Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-46625 \nPublished : May 1, 2025, 8:15 p.m. | 20\u00a0minutes ago \nDescription : Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2 Pro 16.03.30.14 allows a remote attacker that is authorized to the web management portal to gain root shell access to the device by sending a crafted web request. This is persistent because the command injection is saved in the configuration of the device. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/24268"}, {"timestamp": "2025-05-02T13:06:24.956Z", "date_only": false, "value": "2025-05-02T13:06:24.956Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-46625", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-02T13:06:24.956Z", "date_only": false, "value": "2025-05-02T13:06:24.956Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-46625", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-02T14:15:54Z", "date_only": false, "value": "2025-05-02T14:15:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14488", "record": "CVE-2025-46625", "field": "creation_timestamp", "uuid": "b9579553-c17e-4076-98e6-40dfefa9226a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-46625\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2 Pro 16.03.30.14 allows a remote attacker that is authorized to the web management portal to gain root shell access to the device by sending a crafted web request. This is persistent because the command injection is saved in the configuration of the device.\n\ud83d\udccf Published: 2025-05-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T13:06:24.956Z\n\ud83d\udd17 References:\n1. https://www.tendacn.com/us/default.html\n2. https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46625-command-injection-through-setlancfg-in-httpd", "url": "https://t.me/DarkWebInformer_CVEAlerts/14488"}, {"timestamp": "2025-05-02T15:31:45Z", "date_only": false, "value": "2025-05-02T15:31:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q25G-M88J-XMGX", "record": "GHSA-Q25G-M88J-XMGX", "field": "published"}, {"timestamp": "2025-05-02T15:31:45Z", "date_only": false, "value": "2025-05-02T15:31:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q25G-M88J-XMGX", "record": "GHSA-Q25G-M88J-XMGX", "field": "modified"}, {"timestamp": "2025-05-14T00:00:00Z", "date_only": true, "value": "2025-05-14", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-09930", "record": "CNVD-2025-09930", "field": "submitTime"}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202505-0400", "record": "VAR-202505-0400", "field": "sources_release_date.data.0.date"}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": true, "value": "2025-05-15", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-09930", "record": "CNVD-2025-09930", "field": "openTime"}, {"timestamp": "2025-05-16T00:00:00Z", "date_only": false, "value": "2025-05-16T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202505-0400", "record": "VAR-202505-0400", "field": "sources_update_date.data.0.date"}, {"timestamp": "2025-05-27T14:22:39.907Z", "date_only": false, "value": "2025-05-27T14:22:39.907000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202505-0400", "record": "VAR-202505-0400", "field": "sources_update_date.data.2.date"}, {"timestamp": "2025-05-28T00:00:00Z", "date_only": false, "value": "2025-05-28T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202505-0400", "record": "VAR-202505-0400", "field": "sources_release_date.data.1.date"}, {"timestamp": "2025-05-28T04:48:00Z", "date_only": false, "value": "2025-05-28T04:48:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202505-0400", "record": "VAR-202505-0400", "field": "sources_update_date.data.1.date"}, {"timestamp": "2025-05-29T23:44:26.085Z", "date_only": false, "value": "2025-05-29T23:44:26.085000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202505-0400", "record": "VAR-202505-0400", "field": "last_update_date"}, {"timestamp": "2026-06-17T09:26:43.550Z", "date_only": false, "value": "2026-06-17T09:26:43.550", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-46625", "record": "FKIE_CVE-2025-46625", "field": "lastModified"}]}