CVE-2025-4357

Critical · 9.8

CVSS

9.8

EPSS

15.8%

Published

May 6, 2025

CISA due date

—

The record

A vulnerability was found in Tenda RX3 16.03.13.11_multi. It has been rated as critical. This issue affects some unknown processing of the file /goform/telnet. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected packages

Ecosystem	Package	Introduced	Fixed