CVE-2025-52364

Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if default or weak credentials are present

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.51% chance of exploitation in the next 30 days, 41th percentile

Published

2025-07-09

Updated

2025-07-14

Proof-of-concept exploits (1)

• https://cybermaya.in/posts/Post-40/

References

• CVE Record
• NVD entry

Related

• CVE-2025-52363
• CVE-2025-52367
• CVE-2025-52358
• CVE-2025-52372
• CVE-2025-5232
• CVE-2025-52373