High severity · published Jun 6, 2025
CVE-2025-5763
A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical
8.8
CVSS
4.8%
EPSS
No
On KEV
Description
A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function sub_F3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.8% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cp3 Firmware · Tenda
11.10.00.2311090948 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-5763
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-5763
Exploit
https://blog.kevgen.ru/posts/rce_in_tenda_cp3_camera
Exploit
https://github.com/k3vg3n/researches/blob/main/RCE_in_Tenda_CP3_camera.md
Permissions Required
https://vuldb.com/?ctiid.311305
Third Party Advisory
https://vuldb.com/?id.311305
Third Party Advisory
https://vuldb.com/?submit.590784
Product
https://www.tenda.com.cn/
More from Cp3 Firmware
10.0
CVE-2026-86152
Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection
9.8
CVE-2023-30354
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi password is shown, and the hardcoded boot…
9.8
CVE-2023-30353
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML document
9.8
CVE-2023-30352
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed
9.8
CVE-2023-23080
Certain Tenda products are vulnerable to command injection