Howitouchyou

**Name of the Vulnerable Software and Affected Versions** Tenda CH7 versions prior to 20260625 Tenda CH7G versions prior to 20260625 Tenda CH10 versions prior to 20260625 Tenda CP3 versions prior to 20260625 Tenda CP3 Pro versions prior to 20260625 Tenda CP7 versions prior to 20260625 Tenda TC3B14C versions prior to 20260625 Tenda TC3B15C versions prior to 20260625 Tenda TC3T14C versions prior to 20260625 Tenda TC3T15C versions prior to 20260625 **Description** A remote command injection flaw exists within the ATE Module. The issue resides in the `CAte::HandleCmd()` function located in the Kylin file, allowing a remote attacker to execute arbitrary commands. **Recommendations** Update Tenda CH7 to a version released after 20260625. Update Tenda CH7G to a version released after 20260625. Update Tenda CH10 to a version released after 20260625. Update Tenda CP3 to a version released after 20260625. Update Tenda CP3 Pro to a version released after 20260625. Update Tenda CP7 to a version released after 20260625. Update Tenda TC3B14C to a version released after 20260625. Update Tenda TC3B15C to a version released after 20260625. Update Tenda TC3T14C to a version released after 20260625. Update Tenda TC3T15C to a version released after 20260625.

A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected is the function CWebSessionManager ParseSession of the file /user/bin/Kylin of the component Kylin Web Service. Such manipulation of the argument SESSION leads to insufficient entropy. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is told to be difficult.

**Name of the Vulnerable Software and Affected Versions** Tenda CH7 versions prior to 20260625 Tenda CH7G versions prior to 20260625 Tenda CH10 versions prior to 20260625 Tenda CP3 versions prior to 20260625 Tenda CP3 Pro versions prior to 20260625 Tenda CP7 versions prior to 20260625 Tenda TC3B14C versions prior to 20260625 Tenda TC3B15C versions prior to 20260625 Tenda TC3T14C versions prior to 20260625 Tenda TC3T15C versions prior to 20260625 **Description** A flaw in the RTSP/ONVIF component allows remote attackers to bypass authentication through specific manipulation. RTSP (Real Time Streaming Protocol) is a network control protocol designed for the use of efficient delivery of real-time media streams, and ONVIF (Open Network Video Interface Forum) is a global standard for the integration of IP-based physical security products. **Recommendations** Update Tenda CH7 to a version released after 20260625. Update Tenda CH7G to a version released after 20260625. Update Tenda CH10 to a version released after 20260625. Update Tenda CP3 to a version released after 20260625. Update Tenda CP3 Pro to a version released after 20260625. Update Tenda CP7 to a version released after 20260625. Update Tenda TC3B14C to a version released after 20260625. Update Tenda TC3B15C to a version released after 20260625. Update Tenda TC3T14C to a version released after 20260625. Update Tenda TC3T15C to a version released after 20260625. As a temporary mitigation, restrict access to the RTSP/ONVIF component.

**Name of the Vulnerable Software and Affected Versions** Tenda CH versions V21.x through V27.x Tenda CP versions V21.x through V27.x Tenda TX3 versions V21.x through V27.x **Description** A flaw in the SSH component allows remote attackers to use a hard-coded password through specific manipulation. This attack is characterized by high complexity and is considered difficult to exploit. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.