This vulnerability in Tenda devices affects an unspecified functionality within the RTSP/ONVIF component, resulting in missing authentication controls. This allows a remote attacker to potentially manipulate the device without authentication. The attack complexity is high, meaning exploitation is not straightforward. The vulnerability is present in multiple Tenda models up to the 20260625 version. Although exploit code is publicly available, there are no known exploits in the wild. No vendor advisory or patch information is currently available.

The vulnerability allows remote attackers to bypass authentication in the RTSP/ONVIF component of affected Tenda devices. This could lead to unauthorized access or manipulation of device functionality. The medium CVSS score (6.3) reflects moderate impact with high attack complexity and no privileges or user interaction required. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround has been published, users should monitor vendor communications for updates. Until a patch is available, restricting network access to the affected devices and disabling RTSP/ONVIF services if possible may reduce exposure.