CVE-2025-29360

Summary

CVE-2025-29360 is a newly identified vulnerability affecting the Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 firmware. This issue permits attackers to trigger a denial-of-service (DoS) condition through a buffer overflow, specifically targeting the time and timeZone parameters within the /goform/SetSysTimeCfg interface. The vulnerability is exploited by sending a crafted packet to the device, resulting in potential system instability or downtime. It is highly recommended that affected users apply the appropriate software patch or update to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.