CVEvulnerability
CVE-2025-46632
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-05-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- Weaknesses
- CWE-323
Description
Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an attacker to discern information about or more easily decrypt encrypted messages between client and server.
Affected configurations
• tenda rx2 pro firmware 16.03.30.14
Related
Weakness · CWE (1)
- CWE-323 Reusing a Nonce, Key Pair in Encryption weakness
References
- https://blog.uturn.dev/#/writeups/iot-village/tenda-rx2pro/README?id=cve-2025-46632-static-iv-use-in-httpd Exploit, Third Party Advisory
- https://www.tendacn.com/us/default.html Product