CVE-2025-11666

Name of the Vulnerable Software and Affected Versions Tenda RP3 Pro versions through 22.5.7.93

Description A security issue exists in Tenda RP3 Pro up to version 22.5.7.93, specifically within the Firmware Update Handler component. Manipulation of the current force upgrade pwd argument in the force upgrade.sh file can result in the use of a hard-coded password. This issue can only be exploited locally. The exploit for this issue has been published.

Recommendations Update to a version later than 22.5.7.93.