CVE-2025-29357
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 13, 2025
Updated: Apr 2, 2025
CWE ID 404
Summary
CVE-2025-29357 is a buffer overflow vulnerability affecting Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 firmware. The issue lies in the SetPptpServerCfg form, where the startIp and endIp parameters are susceptible to excessive input. An attacker can exploit this vulnerability by sending a specially crafted packet, resulting in buffer overflow and causing a Denial of Service (DoS) condition.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.