CVE-2025-15232: falha de alta gravidade em Tenda M3
Tenda M3 setAdPushInfo formSetAdPushInfo stack-based overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.7%
A vulnerability was identified in Tenda M3 1.0.0.13(4903). This vulnerability affects the function formSetAdPushInfo of the file /goform/setAdPushInfo. The manipulation of the argument mac/terminal leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
Tenda · M3CVEs relacionadas — Tenda M3
No mesmo produto, das mais perigosas para as menos.
CVE-2025-9299HIGHTenda M3 getMasterPassengerAnalyseData formGetMasterPassengerAnalyseData stack-based overflowEPSS 5.5%CVE-2025-15252HIGHTenda M3 setDhcpAP formSetRemoteDhcpForAp stack-based overflowEPSS 3.3%CVE-2025-15234HIGHTenda M3 setInternetLanInfo formSetRemoteInternetLanInfo heap-based overflowEPSS 2.9%CVE-2025-9298HIGHTenda M3 QuickIndex formQuickIndex stack-based overflowEPSS 1.2%CVE-2025-15253HIGHTenda M3 exeCommand stack-based overflowEPSS 0.7%CVE-2025-15233HIGHTenda M3 setAdInfoDetail formSetAdInfoDetails heap-based overflowEPSS 0.7%