CVE-2025-5864 | Tenda TDSEE App up to 1.7.12 Password Reset Confirmation Code /app/ConfirmSmsCode excessive authentication

SecurityVulns
Yanac

A vulnerability was found in Tenda TDSEE App up to 1.7.12. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /app/ConfirmSmsCode of the component Password Reset Confirmation Code Handler. The manipulation leads to improper restriction of excessive authentication attempts.

This vulnerability is known as CVE-2025-5864. The attack can be launched remotely. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More