Search
Find a vulnerability
Search criteria
2 vulnerabilities found for RP3 Pro by Tenda
CVE-2025-11666 (GCVE-0-2025-11666)
Vulnerability from nvd – Published: 2025-10-13 07:02 – Updated: 2025-10-14 15:03
VLAI
EPSS
VEX
Title
Tenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password
Summary
A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file force_upgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument current_force_upgrade_pwd can lead to use of hard-coded password. The attack can only be executed locally. The exploit has been published and may be used.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.328085 | vdb-entrytechnical-description |
| https://vuldb.com/?ctiid.328085 | signaturepermissions-required |
| https://vuldb.com/?submit.673128 | third-party-advisory |
| https://github.com/IOTRes/IOT_Firmware_Update/blo… | exploitpatch |
| https://www.tenda.com.cn/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tenda | RP3 Pro |
Affected:
22.5.7.0
Affected: 22.5.7.1 Affected: 22.5.7.2 Affected: 22.5.7.3 Affected: 22.5.7.4 Affected: 22.5.7.5 Affected: 22.5.7.6 Affected: 22.5.7.7 Affected: 22.5.7.8 Affected: 22.5.7.9 Affected: 22.5.7.10 Affected: 22.5.7.11 Affected: 22.5.7.12 Affected: 22.5.7.13 Affected: 22.5.7.14 Affected: 22.5.7.15 Affected: 22.5.7.16 Affected: 22.5.7.17 Affected: 22.5.7.18 Affected: 22.5.7.19 Affected: 22.5.7.20 Affected: 22.5.7.21 Affected: 22.5.7.22 Affected: 22.5.7.23 Affected: 22.5.7.24 Affected: 22.5.7.25 Affected: 22.5.7.26 Affected: 22.5.7.27 Affected: 22.5.7.28 Affected: 22.5.7.29 Affected: 22.5.7.30 Affected: 22.5.7.31 Affected: 22.5.7.32 Affected: 22.5.7.33 Affected: 22.5.7.34 Affected: 22.5.7.35 Affected: 22.5.7.36 Affected: 22.5.7.37 Affected: 22.5.7.38 Affected: 22.5.7.39 Affected: 22.5.7.40 Affected: 22.5.7.41 Affected: 22.5.7.42 Affected: 22.5.7.43 Affected: 22.5.7.44 Affected: 22.5.7.45 Affected: 22.5.7.46 Affected: 22.5.7.47 Affected: 22.5.7.48 Affected: 22.5.7.49 Affected: 22.5.7.50 Affected: 22.5.7.51 Affected: 22.5.7.52 Affected: 22.5.7.53 Affected: 22.5.7.54 Affected: 22.5.7.55 Affected: 22.5.7.56 Affected: 22.5.7.57 Affected: 22.5.7.58 Affected: 22.5.7.59 Affected: 22.5.7.60 Affected: 22.5.7.61 Affected: 22.5.7.62 Affected: 22.5.7.63 Affected: 22.5.7.64 Affected: 22.5.7.65 Affected: 22.5.7.66 Affected: 22.5.7.67 Affected: 22.5.7.68 Affected: 22.5.7.69 Affected: 22.5.7.70 Affected: 22.5.7.71 Affected: 22.5.7.72 Affected: 22.5.7.73 Affected: 22.5.7.74 Affected: 22.5.7.75 Affected: 22.5.7.76 Affected: 22.5.7.77 Affected: 22.5.7.78 Affected: 22.5.7.79 Affected: 22.5.7.80 Affected: 22.5.7.81 Affected: 22.5.7.82 Affected: 22.5.7.83 Affected: 22.5.7.84 Affected: 22.5.7.85 Affected: 22.5.7.86 Affected: 22.5.7.87 Affected: 22.5.7.88 Affected: 22.5.7.89 Affected: 22.5.7.90 Affected: 22.5.7.91 Affected: 22.5.7.92 Affected: 22.5.7.93 |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-11666",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-10-14T15:02:57.658834Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-14T15:03:06.353Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"modules": [
"Firmware Update Handler"
],
"product": "RP3 Pro",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "22.5.7.0"
},
{
"status": "affected",
"version": "22.5.7.1"
},
{
"status": "affected",
"version": "22.5.7.2"
},
{
"status": "affected",
"version": "22.5.7.3"
},
{
"status": "affected",
"version": "22.5.7.4"
},
{
"status": "affected",
"version": "22.5.7.5"
},
{
"status": "affected",
"version": "22.5.7.6"
},
{
"status": "affected",
"version": "22.5.7.7"
},
{
"status": "affected",
"version": "22.5.7.8"
},
{
"status": "affected",
"version": "22.5.7.9"
},
{
"status": "affected",
"version": "22.5.7.10"
},
{
"status": "affected",
"version": "22.5.7.11"
},
{
"status": "affected",
"version": "22.5.7.12"
},
{
"status": "affected",
"version": "22.5.7.13"
},
{
"status": "affected",
"version": "22.5.7.14"
},
{
"status": "affected",
"version": "22.5.7.15"
},
{
"status": "affected",
"version": "22.5.7.16"
},
{
"status": "affected",
"version": "22.5.7.17"
},
{
"status": "affected",
"version": "22.5.7.18"
},
{
"status": "affected",
"version": "22.5.7.19"
},
{
"status": "affected",
"version": "22.5.7.20"
},
{
"status": "affected",
"version": "22.5.7.21"
},
{
"status": "affected",
"version": "22.5.7.22"
},
{
"status": "affected",
"version": "22.5.7.23"
},
{
"status": "affected",
"version": "22.5.7.24"
},
{
"status": "affected",
"version": "22.5.7.25"
},
{
"status": "affected",
"version": "22.5.7.26"
},
{
"status": "affected",
"version": "22.5.7.27"
},
{
"status": "affected",
"version": "22.5.7.28"
},
{
"status": "affected",
"version": "22.5.7.29"
},
{
"status": "affected",
"version": "22.5.7.30"
},
{
"status": "affected",
"version": "22.5.7.31"
},
{
"status": "affected",
"version": "22.5.7.32"
},
{
"status": "affected",
"version": "22.5.7.33"
},
{
"status": "affected",
"version": "22.5.7.34"
},
{
"status": "affected",
"version": "22.5.7.35"
},
{
"status": "affected",
"version": "22.5.7.36"
},
{
"status": "affected",
"version": "22.5.7.37"
},
{
"status": "affected",
"version": "22.5.7.38"
},
{
"status": "affected",
"version": "22.5.7.39"
},
{
"status": "affected",
"version": "22.5.7.40"
},
{
"status": "affected",
"version": "22.5.7.41"
},
{
"status": "affected",
"version": "22.5.7.42"
},
{
"status": "affected",
"version": "22.5.7.43"
},
{
"status": "affected",
"version": "22.5.7.44"
},
{
"status": "affected",
"version": "22.5.7.45"
},
{
"status": "affected",
"version": "22.5.7.46"
},
{
"status": "affected",
"version": "22.5.7.47"
},
{
"status": "affected",
"version": "22.5.7.48"
},
{
"status": "affected",
"version": "22.5.7.49"
},
{
"status": "affected",
"version": "22.5.7.50"
},
{
"status": "affected",
"version": "22.5.7.51"
},
{
"status": "affected",
"version": "22.5.7.52"
},
{
"status": "affected",
"version": "22.5.7.53"
},
{
"status": "affected",
"version": "22.5.7.54"
},
{
"status": "affected",
"version": "22.5.7.55"
},
{
"status": "affected",
"version": "22.5.7.56"
},
{
"status": "affected",
"version": "22.5.7.57"
},
{
"status": "affected",
"version": "22.5.7.58"
},
{
"status": "affected",
"version": "22.5.7.59"
},
{
"status": "affected",
"version": "22.5.7.60"
},
{
"status": "affected",
"version": "22.5.7.61"
},
{
"status": "affected",
"version": "22.5.7.62"
},
{
"status": "affected",
"version": "22.5.7.63"
},
{
"status": "affected",
"version": "22.5.7.64"
},
{
"status": "affected",
"version": "22.5.7.65"
},
{
"status": "affected",
"version": "22.5.7.66"
},
{
"status": "affected",
"version": "22.5.7.67"
},
{
"status": "affected",
"version": "22.5.7.68"
},
{
"status": "affected",
"version": "22.5.7.69"
},
{
"status": "affected",
"version": "22.5.7.70"
},
{
"status": "affected",
"version": "22.5.7.71"
},
{
"status": "affected",
"version": "22.5.7.72"
},
{
"status": "affected",
"version": "22.5.7.73"
},
{
"status": "affected",
"version": "22.5.7.74"
},
{
"status": "affected",
"version": "22.5.7.75"
},
{
"status": "affected",
"version": "22.5.7.76"
},
{
"status": "affected",
"version": "22.5.7.77"
},
{
"status": "affected",
"version": "22.5.7.78"
},
{
"status": "affected",
"version": "22.5.7.79"
},
{
"status": "affected",
"version": "22.5.7.80"
},
{
"status": "affected",
"version": "22.5.7.81"
},
{
"status": "affected",
"version": "22.5.7.82"
},
{
"status": "affected",
"version": "22.5.7.83"
},
{
"status": "affected",
"version": "22.5.7.84"
},
{
"status": "affected",
"version": "22.5.7.85"
},
{
"status": "affected",
"version": "22.5.7.86"
},
{
"status": "affected",
"version": "22.5.7.87"
},
{
"status": "affected",
"version": "22.5.7.88"
},
{
"status": "affected",
"version": "22.5.7.89"
},
{
"status": "affected",
"version": "22.5.7.90"
},
{
"status": "affected",
"version": "22.5.7.91"
},
{
"status": "affected",
"version": "22.5.7.92"
},
{
"status": "affected",
"version": "22.5.7.93"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "IOT_Res (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file force_upgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument current_force_upgrade_pwd can lead to use of hard-coded password. The attack can only be executed locally. The exploit has been published and may be used."
},
{
"lang": "de",
"value": "Es wurde eine Schwachstelle in Tenda RP3 Pro up to 22.5.7.93 entdeckt. Betroffen davon ist eine unbekannte Funktion der Datei force_upgrade.sh der Komponente Firmware Update Handler. Durch das Beeinflussen des Arguments current_force_upgrade_pwd mit unbekannten Daten kann eine use of hard-coded password-Schwachstelle ausgenutzt werden. Der Angriff muss lokal durchgef\u00fchrt werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:L/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-259",
"description": "Use of Hard-coded Password",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-255",
"description": "Credentials Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-13T07:02:07.269Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-328085 | Tenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/?id.328085"
},
{
"name": "VDB-328085 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.328085"
},
{
"name": "Submit #673128 | Tenda RP3 Pro V22.5.7.93 CWE-287 Improper Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.673128"
},
{
"tags": [
"exploit",
"patch"
],
"url": "https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/RP3.md"
},
{
"tags": [
"product"
],
"url": "https://www.tenda.com.cn/"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-10-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2025-10-12T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2025-10-12T15:19:26.000Z",
"value": "VulDB entry last update"
}
],
"title": "Tenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2025-11666",
"datePublished": "2025-10-13T07:02:07.269Z",
"dateReserved": "2025-10-12T13:14:23.093Z",
"dateUpdated": "2025-10-14T15:03:06.353Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-11666 (GCVE-0-2025-11666)
Vulnerability from cvelistv5 – Published: 2025-10-13 07:02 – Updated: 2025-10-14 15:03
VLAI
EPSS
VEX
Title
Tenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password
Summary
A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file force_upgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument current_force_upgrade_pwd can lead to use of hard-coded password. The attack can only be executed locally. The exploit has been published and may be used.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.328085 | vdb-entrytechnical-description |
| https://vuldb.com/?ctiid.328085 | signaturepermissions-required |
| https://vuldb.com/?submit.673128 | third-party-advisory |
| https://github.com/IOTRes/IOT_Firmware_Update/blo… | exploitpatch |
| https://www.tenda.com.cn/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Tenda | RP3 Pro |
Affected:
22.5.7.0
Affected: 22.5.7.1 Affected: 22.5.7.2 Affected: 22.5.7.3 Affected: 22.5.7.4 Affected: 22.5.7.5 Affected: 22.5.7.6 Affected: 22.5.7.7 Affected: 22.5.7.8 Affected: 22.5.7.9 Affected: 22.5.7.10 Affected: 22.5.7.11 Affected: 22.5.7.12 Affected: 22.5.7.13 Affected: 22.5.7.14 Affected: 22.5.7.15 Affected: 22.5.7.16 Affected: 22.5.7.17 Affected: 22.5.7.18 Affected: 22.5.7.19 Affected: 22.5.7.20 Affected: 22.5.7.21 Affected: 22.5.7.22 Affected: 22.5.7.23 Affected: 22.5.7.24 Affected: 22.5.7.25 Affected: 22.5.7.26 Affected: 22.5.7.27 Affected: 22.5.7.28 Affected: 22.5.7.29 Affected: 22.5.7.30 Affected: 22.5.7.31 Affected: 22.5.7.32 Affected: 22.5.7.33 Affected: 22.5.7.34 Affected: 22.5.7.35 Affected: 22.5.7.36 Affected: 22.5.7.37 Affected: 22.5.7.38 Affected: 22.5.7.39 Affected: 22.5.7.40 Affected: 22.5.7.41 Affected: 22.5.7.42 Affected: 22.5.7.43 Affected: 22.5.7.44 Affected: 22.5.7.45 Affected: 22.5.7.46 Affected: 22.5.7.47 Affected: 22.5.7.48 Affected: 22.5.7.49 Affected: 22.5.7.50 Affected: 22.5.7.51 Affected: 22.5.7.52 Affected: 22.5.7.53 Affected: 22.5.7.54 Affected: 22.5.7.55 Affected: 22.5.7.56 Affected: 22.5.7.57 Affected: 22.5.7.58 Affected: 22.5.7.59 Affected: 22.5.7.60 Affected: 22.5.7.61 Affected: 22.5.7.62 Affected: 22.5.7.63 Affected: 22.5.7.64 Affected: 22.5.7.65 Affected: 22.5.7.66 Affected: 22.5.7.67 Affected: 22.5.7.68 Affected: 22.5.7.69 Affected: 22.5.7.70 Affected: 22.5.7.71 Affected: 22.5.7.72 Affected: 22.5.7.73 Affected: 22.5.7.74 Affected: 22.5.7.75 Affected: 22.5.7.76 Affected: 22.5.7.77 Affected: 22.5.7.78 Affected: 22.5.7.79 Affected: 22.5.7.80 Affected: 22.5.7.81 Affected: 22.5.7.82 Affected: 22.5.7.83 Affected: 22.5.7.84 Affected: 22.5.7.85 Affected: 22.5.7.86 Affected: 22.5.7.87 Affected: 22.5.7.88 Affected: 22.5.7.89 Affected: 22.5.7.90 Affected: 22.5.7.91 Affected: 22.5.7.92 Affected: 22.5.7.93 |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-11666",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-10-14T15:02:57.658834Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-14T15:03:06.353Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"modules": [
"Firmware Update Handler"
],
"product": "RP3 Pro",
"vendor": "Tenda",
"versions": [
{
"status": "affected",
"version": "22.5.7.0"
},
{
"status": "affected",
"version": "22.5.7.1"
},
{
"status": "affected",
"version": "22.5.7.2"
},
{
"status": "affected",
"version": "22.5.7.3"
},
{
"status": "affected",
"version": "22.5.7.4"
},
{
"status": "affected",
"version": "22.5.7.5"
},
{
"status": "affected",
"version": "22.5.7.6"
},
{
"status": "affected",
"version": "22.5.7.7"
},
{
"status": "affected",
"version": "22.5.7.8"
},
{
"status": "affected",
"version": "22.5.7.9"
},
{
"status": "affected",
"version": "22.5.7.10"
},
{
"status": "affected",
"version": "22.5.7.11"
},
{
"status": "affected",
"version": "22.5.7.12"
},
{
"status": "affected",
"version": "22.5.7.13"
},
{
"status": "affected",
"version": "22.5.7.14"
},
{
"status": "affected",
"version": "22.5.7.15"
},
{
"status": "affected",
"version": "22.5.7.16"
},
{
"status": "affected",
"version": "22.5.7.17"
},
{
"status": "affected",
"version": "22.5.7.18"
},
{
"status": "affected",
"version": "22.5.7.19"
},
{
"status": "affected",
"version": "22.5.7.20"
},
{
"status": "affected",
"version": "22.5.7.21"
},
{
"status": "affected",
"version": "22.5.7.22"
},
{
"status": "affected",
"version": "22.5.7.23"
},
{
"status": "affected",
"version": "22.5.7.24"
},
{
"status": "affected",
"version": "22.5.7.25"
},
{
"status": "affected",
"version": "22.5.7.26"
},
{
"status": "affected",
"version": "22.5.7.27"
},
{
"status": "affected",
"version": "22.5.7.28"
},
{
"status": "affected",
"version": "22.5.7.29"
},
{
"status": "affected",
"version": "22.5.7.30"
},
{
"status": "affected",
"version": "22.5.7.31"
},
{
"status": "affected",
"version": "22.5.7.32"
},
{
"status": "affected",
"version": "22.5.7.33"
},
{
"status": "affected",
"version": "22.5.7.34"
},
{
"status": "affected",
"version": "22.5.7.35"
},
{
"status": "affected",
"version": "22.5.7.36"
},
{
"status": "affected",
"version": "22.5.7.37"
},
{
"status": "affected",
"version": "22.5.7.38"
},
{
"status": "affected",
"version": "22.5.7.39"
},
{
"status": "affected",
"version": "22.5.7.40"
},
{
"status": "affected",
"version": "22.5.7.41"
},
{
"status": "affected",
"version": "22.5.7.42"
},
{
"status": "affected",
"version": "22.5.7.43"
},
{
"status": "affected",
"version": "22.5.7.44"
},
{
"status": "affected",
"version": "22.5.7.45"
},
{
"status": "affected",
"version": "22.5.7.46"
},
{
"status": "affected",
"version": "22.5.7.47"
},
{
"status": "affected",
"version": "22.5.7.48"
},
{
"status": "affected",
"version": "22.5.7.49"
},
{
"status": "affected",
"version": "22.5.7.50"
},
{
"status": "affected",
"version": "22.5.7.51"
},
{
"status": "affected",
"version": "22.5.7.52"
},
{
"status": "affected",
"version": "22.5.7.53"
},
{
"status": "affected",
"version": "22.5.7.54"
},
{
"status": "affected",
"version": "22.5.7.55"
},
{
"status": "affected",
"version": "22.5.7.56"
},
{
"status": "affected",
"version": "22.5.7.57"
},
{
"status": "affected",
"version": "22.5.7.58"
},
{
"status": "affected",
"version": "22.5.7.59"
},
{
"status": "affected",
"version": "22.5.7.60"
},
{
"status": "affected",
"version": "22.5.7.61"
},
{
"status": "affected",
"version": "22.5.7.62"
},
{
"status": "affected",
"version": "22.5.7.63"
},
{
"status": "affected",
"version": "22.5.7.64"
},
{
"status": "affected",
"version": "22.5.7.65"
},
{
"status": "affected",
"version": "22.5.7.66"
},
{
"status": "affected",
"version": "22.5.7.67"
},
{
"status": "affected",
"version": "22.5.7.68"
},
{
"status": "affected",
"version": "22.5.7.69"
},
{
"status": "affected",
"version": "22.5.7.70"
},
{
"status": "affected",
"version": "22.5.7.71"
},
{
"status": "affected",
"version": "22.5.7.72"
},
{
"status": "affected",
"version": "22.5.7.73"
},
{
"status": "affected",
"version": "22.5.7.74"
},
{
"status": "affected",
"version": "22.5.7.75"
},
{
"status": "affected",
"version": "22.5.7.76"
},
{
"status": "affected",
"version": "22.5.7.77"
},
{
"status": "affected",
"version": "22.5.7.78"
},
{
"status": "affected",
"version": "22.5.7.79"
},
{
"status": "affected",
"version": "22.5.7.80"
},
{
"status": "affected",
"version": "22.5.7.81"
},
{
"status": "affected",
"version": "22.5.7.82"
},
{
"status": "affected",
"version": "22.5.7.83"
},
{
"status": "affected",
"version": "22.5.7.84"
},
{
"status": "affected",
"version": "22.5.7.85"
},
{
"status": "affected",
"version": "22.5.7.86"
},
{
"status": "affected",
"version": "22.5.7.87"
},
{
"status": "affected",
"version": "22.5.7.88"
},
{
"status": "affected",
"version": "22.5.7.89"
},
{
"status": "affected",
"version": "22.5.7.90"
},
{
"status": "affected",
"version": "22.5.7.91"
},
{
"status": "affected",
"version": "22.5.7.92"
},
{
"status": "affected",
"version": "22.5.7.93"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "IOT_Res (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file force_upgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument current_force_upgrade_pwd can lead to use of hard-coded password. The attack can only be executed locally. The exploit has been published and may be used."
},
{
"lang": "de",
"value": "Es wurde eine Schwachstelle in Tenda RP3 Pro up to 22.5.7.93 entdeckt. Betroffen davon ist eine unbekannte Funktion der Datei force_upgrade.sh der Komponente Firmware Update Handler. Durch das Beeinflussen des Arguments current_force_upgrade_pwd mit unbekannten Daten kann eine use of hard-coded password-Schwachstelle ausgenutzt werden. Der Angriff muss lokal durchgef\u00fchrt werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:L/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-259",
"description": "Use of Hard-coded Password",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-255",
"description": "Credentials Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-13T07:02:07.269Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-328085 | Tenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/?id.328085"
},
{
"name": "VDB-328085 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.328085"
},
{
"name": "Submit #673128 | Tenda RP3 Pro V22.5.7.93 CWE-287 Improper Authentication",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.673128"
},
{
"tags": [
"exploit",
"patch"
],
"url": "https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Tenda/RP3.md"
},
{
"tags": [
"product"
],
"url": "https://www.tenda.com.cn/"
}
],
"timeline": [
{
"lang": "en",
"time": "2025-10-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2025-10-12T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2025-10-12T15:19:26.000Z",
"value": "VulDB entry last update"
}
],
"title": "Tenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2025-11666",
"datePublished": "2025-10-13T07:02:07.269Z",
"dateReserved": "2025-10-12T13:14:23.093Z",
"dateUpdated": "2025-10-14T15:03:06.353Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}