How severe is CVE-2025-52364?

CVE-2025-52364 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.

Is CVE-2025-52364 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (40th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-52364?

CVE-2025-52364 affects Tenda Cp3 Pro Firmware. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-52364?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

Does CVE-2025-52364 have an EU (EUVD) identifier?

Yes. CVE-2025-52364 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-20828.

When was CVE-2025-52364 published?

CVE-2025-52364 was published on 2025-07-09 and last updated on 2026-06-17.

CVE-2025-52364

CVE-2025-52364 is a high-severity vulnerability in Tenda Cp3 Pro Firmware with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-1391.

Key facts

Severity: High (CVSS 3.x base score 7.5)
EPSS exploit prediction: 1% (40th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-20828
Weakness: CWE-1391
Affected product: Tenda Cp3 Pro Firmware
Published: 2025-07-09
Last modified: 2026-06-17

Description

Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if default or weak credentials are present

Frequently asked questions

What is CVE-2025-52364?: Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if default or weak credentials are present
How severe is CVE-2025-52364?: CVE-2025-52364 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
Is CVE-2025-52364 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (40th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-52364?: CVE-2025-52364 affects Tenda Cp3 Pro Firmware. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-52364?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
Does CVE-2025-52364 have an EU (EUVD) identifier?: Yes. CVE-2025-52364 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-20828.
When was CVE-2025-52364 published?: CVE-2025-52364 was published on 2025-07-09 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:o:tenda:cp3_pro_firmware:22.5.4.93:*:*:*:*:*:*:*

More vulnerabilities in Tenda Cp3 Pro Firmware

CVE-2025-52363 — Medium (CVSS 6.8): Tenda CP3 Pro Firmware V22.5.4.93 contains a hardcoded root password hash in the /etc/passwd file and /etc/passwd-. An…

All CVEs affecting Tenda Cp3 Pro Firmware →

Other CWE-1391 vulnerabilities

CVE-2025-67114 — Critical (CVSS 9.8): Use of a deterministic credential generation algorithm in /ftl/bin/calc_f2 in Small Cell Sercomm SCE4255W (FreedomFi…
CVE-2026-22886 — Critical (CVSS 9.8): OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication. However, the…
CVE-2025-30519 — Critical (CVSS 9.8): Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be changed through…
CVE-2025-6077 — Critical (CVSS 9.8): Partner Software's Partner Software Product and corresponding Partner Web application use the same default username and…
CVE-2024-51978 — Critical (CVSS 9.8): An unauthenticated attacker who knows the target device's serial number, can generate the default administrator…
CVE-2024-12728 — Critical (CVSS 9.8): A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than…

Browse all CWE-1391 vulnerabilities →