CVE-2025-46633

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-46633
Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in response to successful authentication. The IV is always EU5H62G9ICGRNI43.

8.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46633-transmission-of-plaintext-symmetric-key-in-httpd Exploit Third Party Advisory
https://www.tendacn.com/us/default.html Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:rx2_pro_firmware:16.03.30.14:*:*:*:*:*:*:*
cpe:2.3:h:tenda:rx2_pro:-:*:*:*:*:*:*:*
History

27 May 2025, 14:17

Type Values Removed Values Added
References () https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46633-transmission-of-plaintext-symmetric-key-in-httpd - () https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46633-transmission-of-plaintext-symmetric-key-in-httpd - Exploit, Third Party Advisory
References () https://www.tendacn.com/us/default.html - () https://www.tendacn.com/us/default.html - Product
First Time Tenda rx2 Pro
Tenda
Tenda rx2 Pro Firmware
CPE cpe:2.3:h:tenda:rx2_pro:-:*:*:*:*:*:*:*
cpe:2.3:o:tenda:rx2_pro_firmware:16.03.30.14:*:*:*:*:*:*:*

02 May 2025, 15:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.2
CWE CWE-312

02 May 2025, 13:52

Type Values Removed Values Added
Summary
  • (es) La transmisión de información confidencial en texto plano en el portal de administración web del Tenda RX2 Pro 16.03.30.14 permite a un atacante descifrar el tráfico entre el cliente y el servidor mediante la recopilación de la clave AES simétrica del tráfico recopilado u observado. La clave AES se envía en texto plano en respuesta a una autenticación exitosa. El IV siempre es EU5H62G9ICGRNI43.

01 May 2025, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-01 20:15

Updated : 2025-05-27 14:17

NVD link : CVE-2025-46633

Mitre link : CVE-2025-46633

CVE.ORG link : CVE-2025-46633

JSON object : View

Products Affected

tenda

  • rx2_pro_firmware
  • rx2_pro
CWE
CWE-312

Cleartext Storage of Sensitive Information