medium6.7
CVE-2025-11666
A flaw has been found in Tenda RP3 Pro up to 22.5.7.93.
Impact
A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file force_upgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument current_force_upgrade_pwd can lead to use of hard-coded password. The attack can only be executed locally. The exploit has been published and may be used.
Affected products
| Product | Affected versions |
|---|---|
| Tenda RP3 Pro | before 22.5.7.93. |
Versions were read from the advisory text. No structured product data has been published for this record yet.