CVE-2025-52363: Medium severity Tenda CP3 Pro Firmware vulnerability
Tenda CP3 Pro Firmware V22.5.4.93 contains a hardcoded root password hash in the /etc/passwd file and /etc/passwd-. An attacker with access to the firmware image can extract and attempt to crack the root password hash, potentially obtaining administrative access
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52363?
CVE-2025-52363 has a critical severity level due to the presence of a hardcoded root password hash.
How do I fix CVE-2025-52363?
To fix CVE-2025-52363, update the Tenda CP3 Pro Firmware to a version that removes the hardcoded root password hash.
What are the potential risks of CVE-2025-52363?
The risks of CVE-2025-52363 include unauthorized administrative access if the root password hash is cracked.
Who is affected by CVE-2025-52363?
Users of Tenda CP3 Pro Firmware V22.5.4.93 are affected by CVE-2025-52363.
How can an attacker exploit CVE-2025-52363?
An attacker can exploit CVE-2025-52363 by extracting the firmware image and attempting to crack the hardcoded root password hash.