cvedb.io
CVE-2025-46635
HIGH · CVSS 7.1
EPSS exploitation probability: 0%
Published 2025-05-01T20:15:39.600 · Last modified 2026-06-17T09:26:45.270

Summary

An issue was discovered on Tenda RX2 Pro 16.03.30.14 devices. Improper network isolation between the guest Wi-Fi network and other network interfaces on the router allows an attacker (who is authenticated to the guest Wi-Fi) to access resources on the router and/or resources and devices on other networks hosted by the router by configuring a static IP address (within the non-guest subnet) on their host.

Affected products

tenda — rx2_pro_firmware

Does this affect you?

Add your gear to cvedb and we'll alert you only when tenda ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.