Vulnerability Description
A weakness has been identified in Tenda M3 1.0.0.13(4903). Impacted is the function formSetRemoteInternetLanInfo of the file /goform/setInternetLanInfo. This manipulation of the argument portIp/portMask/portGateWay/portDns/portSecDns causes heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | M3 Firmware | 1.0.0.13\(4903\) |
| Tenda | M3 | - |
Related Weaknesses (CWE)
References
- https://github.com/dwBruijn/CVEs/blob/main/Tenda/setRemoteInternetLanInfo.mdExploitThird Party Advisory
- https://vuldb.com/?ctiid.338630Permissions RequiredVDB Entry
- https://vuldb.com/?id.338630Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.725496Third Party AdvisoryVDB Entry
- https://www.tenda.com.cn/Product
FAQ
What is CVE-2025-15234?
CVE-2025-15234 is a vulnerability with a CVSS score of 8.8 (HIGH). A weakness has been identified in Tenda M3 1.0.0.13(4903). Impacted is the function formSetRemoteInternetLanInfo of the file /goform/setInternetLanInfo. This manipulation of the argument portIp/portMa...
How severe is CVE-2025-15234?
CVE-2025-15234 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-15234?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda M3 Firmware, Tenda M3.