CyberRota Analysis
AI-GeneratedTenda devices including CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C, and TC3T15C up to version 20260625 are vulnerable due to a missing authentication issue in the RTSP/ONVIF component, allowing for potential remote exploitation. Although the attack is classified as having high complexity, the public availability of the exploit increases the urgency for affected users to assess their security posture. Organizations utilizing these devices should prioritize remediation efforts to mitigate potential risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. Affected by this vulnerability is an unknown functionality of the component RTSP/ONVIF. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is now public and may be used.