EUVD-2025-17119Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate to camera web interface
-
DeliverySend crafted HTTP request to vulnerable endpoint
-
ExploitTrigger command injection in sub_F3C8C
-
ExecutionExecute arbitrary OS commands
-
ImpactGain control of camera
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Input neutralization, injection prevention
|
| Exploitation Conditions | Requires authenticated access with high privileges (admin) to the Tenda CP3 camera's web interface. The attack is network-accessible (AV:N) and low complexity (AC:L). No special configuration beyond default settings is needed, but the attacker must have valid admin credentials. |
| Impact | CVSS 4.0 vector AV:N/AC:L/AT:N/PR:H/UI:N indicates a network-accessible, low-complexity attack requiring high privileges (authenticated admin). The EPSS score of 0.88% (75th percentile) suggests moderate exploitation probability. Public exploit code exists, increasing risk. However, the requirement for high privileges limits the attack surface to authenticated users. No KEV listing. Overall, this is a real priority for environments with exposed Tenda CP3 cameras, but the high privilege requirement reduces the risk for most deployments. |
| Exploit ScenarioDerived | An attacker with admin credentials to the Tenda CP3 camera sends a crafted HTTP request to the vulnerable endpoint, injecting commands via the sub_F3C8C function. Public exploit code is available, making exploitation straightforward. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv2 – Jul 26, 2026
Command injection in Tenda CP3 camera firmware 11.10.00.2311090948 allows remote authenticated attackers to execute arbitrary commands via the sub_F3C8C function in the apollo file. Public exploit code is available, and EPSS score is 0.88% (75th percentile), indicating moderate exploitation likelihood.
Earlier versions of this analysis (1)
RemediationAI
Upgrade to a patched firmware version if available; check Tenda's official website (https://www.tenda.com.cn/) for updates. As a workaround, restrict network access to the camera's management interface to trusted IPs only, and ensure strong admin credentials are used. Disable remote management if not required. Monitor for any suspicious command execution.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability is a command injection (CWE-74) in the Tenda CP3 IP camera's firmware, specifically in the sub_F3C8C function within the apollo binary. The CPE indicates the affected product is Tenda CP3 firmware version 11.10.00.2311090948. Command injection occurs when user input is improperly sanitized and passed to a system shell, allowing an attacker to execute arbitrary OS commands.
Know when Cp3 Firmware gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
PR:H due to admin auth required; impact set to H for all due to full command execution.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function sub_F3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Executive ViewAI
Organizations using A vulnerability should be aware of moderate risk from CVE-2025-5763, a injection vulnerability rated CVSS 4.7. Exploitation could allow attackers to execute code or inject malicious input. Proof-of-concept code is publicly available. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: deploy WAF rules, restrict network access, enable logging.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
OS command injection occurs when an application passes unsanitized user input directly into system shell commands.
More in Cp3 Firmware
View allCertain Tenda products are vulnerable to command injection. Rated critical severity (CVSS 9.8), this vulnerability is re
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UA
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML docu
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for
Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers t
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for
An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive informatio
Exploit-DB