Tenda Cp3 Pro Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tenda Cp3 Pro Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-52364 — CVSS 7.5 (high): Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default at boot via the…
• CVE-2025-52363 — CVSS 6.8 (medium): Tenda CP3 Pro Firmware V22.5.4.93 contains a hardcoded root password hash in the /etc/passwd file and /etc/passwd-. An attacker with access…