Cyber Posture

CVE-2025-29362

HighPublic PoC

Published: 13 March 2025

Published
13 March 2025
Modified
25 August 2025
KEV Added
Patch
CVSS Score 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0020 41.2th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.

Security Summary

CVE-2025-29362 is a buffer overflow vulnerability (CWE-120) in the Tenda RX3 router, specifically version US_RX3V1.0br_V16.03.13.11_multi_TDE01. The flaw occurs in the handling of the "list" parameter at the /goform/setPptpUserList endpoint, which can be exploited through a crafted packet.

Unauthenticated remote attackers with network access can exploit this vulnerability with low complexity and no user interaction required. Successful exploitation results in a Denial of Service (DoS) condition, disrupting the device's availability. The CVSS v3.1 base score is 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), highlighting its high-impact potential on affected systems.

Advisory information is provided in documents hosted at https://github.com/2664521593/mycve/blob/main/Tenda/RX3/tenda_rx3_bof_3.pdf. No specific details on patches or mitigations are included in the CVE description.

Details

CWE(s)
CWE-120

Affected Products

tenda
rx3 firmware
16.03.13.11_multi_tde01

MITRE ATT&CK Enterprise Techniques

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?

Buffer overflow in unauthenticated web endpoint (/goform/setPptpUserList) on public-facing router interface enables remote exploitation of public-facing application (T1190) to cause DoS via application/system exploitation (T1499.004).

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

References