CVE-2025-46633

HIGH Year: 2025
CVSS v3 Score
8.2
High
Weakness Type
CWE-312
View all →

Vulnerability Description

Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an attacker to decrypt traffic between the client and server by collecting the symmetric AES key from collected and/or observed traffic. The AES key in sent in cleartext in response to successful authentication. The IV is always EU5H62G9ICGRNI43.

Related Vulnerabilities

CVE-2019-3612

HIGH
CVSS:8.2(High)

Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text v...

CWE-3122019

CVE-2024-53865

HIGH
CVSS:8.2(High)

zhmcclient is a pure Python client library for the IBM Z HMC Web Services API. In affected versions the Python package "zhmcclient" writes password-like properties in clear text into its HMC and API l...

CWE-3122024

CVE-2024-53979

HIGH
CVSS:8.2(High)

ibm.ibm_zhmc is an Ansible collection for the IBM Z HMC. The Ansible collection "ibm.ibm_zhmc" writes password-like properties in clear text into its log file and into the output returned by some of i...

CWE-3122024

CVE-2025-46634

HIGH
CVSS:8.2(High)

Cleartext transmission of sensitive information in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an unauthenticated attacker to authenticate to the web management portal by coll...

CWE-3122025

CVE-2019-9872

HIGH
CVSS:8.1(High)

In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers leads to saving a cleartext unencrypted record of the server credentials in the IDE c...

CWE-3122019

CVE-2023-28713

HIGH
CVSS:8.1(High)

Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account information of the database is saved in a local file in plaintext, a user who can access t...

CWE-3122023