CVE-2025-29362

Summary

CVE-2025-29362 is a newly identified vulnerability affecting the Tenda RX3 US_RX3V1.0br_V16.03.13.11_multi_TDE01 firmware. The issue stems from a buffer overflow weakness in the /goform/setPptpUserList interface. Maliciously crafted packets can be exploited to cause a Denial of Service (DoS) by overwhelming the designated buffer. Attackers can take advantage of this vulnerability to disrupt the targeted device's functionality. This weakness poses a significant threat to network security, emphasizing the importance of prompt updates to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.