CVE-2025-5763
Published: 06 June 2025
Summary
CVE-2025-5763 is a low-severity Injection (CWE-74) vulnerability in Tenda Cp3 Firmware. Its CVSS base score is 2.0 (Low).
Operationally, ranked in the top 10.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
A command injection vulnerability tracked as CVE-2025-5763 affects the Tenda CP3 device running firmware 11.10.00.2311090948. The issue resides in the sub_F3C8C function within the apollo file and stems from improper handling of user-supplied input, corresponding to CWE-74 and CWE-77. It received a CVSS 4.0 score of 2.0 reflecting high privileges required and limited impacts on confidentiality, integrity, and availability.
An authenticated remote attacker with administrative access can supply crafted input to the affected function and execute arbitrary commands on the device. Public proof-of-concept material has been released, confirming that the attack requires no user interaction and can be initiated over the network.
The associated EPSS score has remained flat at 0.0432 with no material increase since disclosure. References consist of technical write-ups and vulnerability database entries that document the flaw but do not describe vendor patches or mitigation steps.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-17119
Vulnerability details
A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function sub_F3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has…
more
been disclosed to the public and may be used.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Developer assessments and testing (including injection-focused techniques) identify improper neutralization of special elements, and the verifiable flaw remediation corrects them pre-deployment.
Identifies indicators of injection attacks (command, SQL, LDAP, etc.) via anomaly and attack monitoring.