CVE-2025-52364

Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if default or weak credentials are present

CVSS v3.1 CNA

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.56% chance of exploitation in the next 30 days, 45th percentile

Published

2025-07-09

Updated

2025-07-14

Proof-of-concept exploits (1)

• https://cybermaya.in/posts/Post-40/

Security advisories

• https://cybermaya.in/posts/Post-40

References

• CVE Record
• NVD entry