CVE-2026-51600

Name of the Vulnerable Software and Affected Versions Tenda CP3 V3.0 version V31.1.9.91

Description The RTSP parser fails to validate the Content-Length header field in RTSP requests, specifically affecting the DESCRIBE, SETUP, and PLAY methods. If a request includes a Content-Length header but lacks a corresponding message body, the parser enters a persistent state of awaiting the body. This prevents the TCP connection from functioning and, because the device does not close the connection, it leads to a TCP resource leak. An unauthenticated remote attacker can exploit this behavior to trigger a denial-of-service condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.