Tenda

M3

9 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-15253

Exploit
  • EPSS 0.09%
  • Veröffentlicht 30.12.2025 15:15:44
  • Zuletzt bearbeitet 02.01.2026 21:19:45

A vulnerability has been found in Tenda M3 1.0.0.13(4903). The impacted element is an unknown function of the file /goform/exeCommand. Such manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be launched remotel...

8.8

CVE-2025-15252

Exploit
  • EPSS 0.09%
  • Veröffentlicht 30.12.2025 14:32:07
  • Zuletzt bearbeitet 02.01.2026 21:18:09

A flaw has been found in Tenda M3 1.0.0.13(4903). The affected element is the function formSetRemoteDhcpForAp of the file /goform/setDhcpAP. This manipulation of the argument startip/endip/leasetime/gateway/dns1/dns2 causes stack-based buffer overflo...

9

CVE-2025-15234

Exploit
  • EPSS 0.09%
  • Veröffentlicht 30.12.2025 08:32:06
  • Zuletzt bearbeitet 24.02.2026 07:17:05

A weakness has been identified in Tenda M3 1.0.0.13(4903). Impacted is the function formSetRemoteInternetLanInfo of the file /goform/setInternetLanInfo. This manipulation of the argument portIp/portMask/portGateWay/portDns/portSecDns causes heap-base...

9

CVE-2025-15233

Exploit
  • EPSS 0.09%
  • Veröffentlicht 30.12.2025 08:02:06
  • Zuletzt bearbeitet 24.02.2026 07:17:05

A security flaw has been discovered in Tenda M3 1.0.0.13(4903). This issue affects the function formSetAdInfoDetails of the file /goform/setAdInfoDetail. The manipulation of the argument adName/smsPassword/smsAccount/weixinAccount/weixinName/smsSigna...

8.8

CVE-2025-15232

Exploit
  • EPSS 0.09%
  • Veröffentlicht 30.12.2025 07:32:09
  • Zuletzt bearbeitet 02.01.2026 21:17:26

A vulnerability was identified in Tenda M3 1.0.0.13(4903). This vulnerability affects the function formSetAdPushInfo of the file /goform/setAdPushInfo. The manipulation of the argument mac/terminal leads to stack-based buffer overflow. The attack is ...

9

CVE-2025-15231

Exploit
  • EPSS 0.09%
  • Veröffentlicht 30.12.2025 07:15:43
  • Zuletzt bearbeitet 24.02.2026 07:17:04

A vulnerability was determined in Tenda M3 1.0.0.13(4903). This affects the function formSetRemoteVlanInfo of the file /goform/setVlanInfo. Executing a manipulation of the argument ID/vlan/port can lead to stack-based buffer overflow. The attack can ...

9

CVE-2025-15230

Exploit
  • EPSS 0.09%
  • Veröffentlicht 30.12.2025 06:32:07
  • Zuletzt bearbeitet 24.02.2026 07:17:04

A vulnerability was found in Tenda M3 1.0.0.13(4903). Affected by this issue is the function formSetVlanPolicy of the file /goform/setVlanPolicyData. Performing a manipulation of the argument qvlan_truck_port results in heap-based buffer overflow. Re...

9.8

CVE-2025-9299

Exploit
  • EPSS 0.48%
  • Veröffentlicht 21.08.2025 12:32:12
  • Zuletzt bearbeitet 25.08.2025 02:00:23

A vulnerability has been found in Tenda M3 1.0.0.12. Affected by this vulnerability is the function formGetMasterPassengerAnalyseData of the file /goform/getMasterPassengerAnalyseData. The manipulation of the argument Time leads to stack-based buffer...

9.8

CVE-2025-9298

Exploit
  • EPSS 0.4%
  • Veröffentlicht 21.08.2025 12:32:08
  • Zuletzt bearbeitet 25.08.2025 01:59:22

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The...