M3 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:m3_firmware:1.0.0.13\(4903\):*:*:*:*:*:*:*
part: o version: 1.0.0.13(4903) update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | M3 Firmware (312ff193-b74f-5381-b4be-e30dc2155d37) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-15253 |
vulnerable | 2026-06-08 07:06:35.942508 |
Tenda M3 exeCommand stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda M3 1.0.0.13(4903). The impacted element is an unknown function of the file /goform/exeCommand. Such manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-12-30T15:02:06.940Z
Updated: 2026-02-24T06:17:18.964Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15252 |
vulnerable | 2026-06-08 07:06:35.942012 |
Tenda M3 setDhcpAP formSetRemoteDhcpForAp stack-based overflow
HIGH (8.8)
A flaw has been found in Tenda M3 1.0.0.13(4903). The affected element is the function formSetRemoteDhcpForAp of the file /goform/setDhcpAP. This manipulation of the argument startip/endip/leasetime/gateway/dns1/dns2 causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.
Published: 2025-12-30T14:32:07.886Z
Updated: 2026-02-24T06:17:05.099Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15234 |
vulnerable | 2026-06-08 07:06:35.912715 |
Tenda M3 setInternetLanInfo formSetRemoteInternetLanInfo heap-based overflow
HIGH (8.8)
A weakness has been identified in Tenda M3 1.0.0.13(4903). Impacted is the function formSetRemoteInternetLanInfo of the file /goform/setInternetLanInfo. This manipulation of the argument portIp/portMask/portGateWay/portDns/portSecDns causes heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2025-12-30T08:32:06.259Z
Updated: 2026-02-24T06:15:36.216Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15233 |
vulnerable | 2026-06-08 07:06:35.912263 |
Tenda M3 setAdInfoDetail formSetAdInfoDetails heap-based overflow
HIGH (8.8)
A security flaw has been discovered in Tenda M3 1.0.0.13(4903). This issue affects the function formSetAdInfoDetails of the file /goform/setAdInfoDetail. The manipulation of the argument adName/smsPassword/smsAccount/weixinAccount/weixinName/smsSignature/adRedirectUrl/adCopyRight/smsContent/adItemUID results in heap-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Published: 2025-12-30T08:02:06.822Z
Updated: 2026-02-24T06:15:19.863Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15232 |
vulnerable | 2026-06-08 07:06:35.911817 |
Tenda M3 setAdPushInfo formSetAdPushInfo stack-based overflow
HIGH (8.8)
A vulnerability was identified in Tenda M3 1.0.0.13(4903). This vulnerability affects the function formSetAdPushInfo of the file /goform/setAdPushInfo. The manipulation of the argument mac/terminal leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Published: 2025-12-30T07:32:09.836Z
Updated: 2026-02-24T06:15:04.268Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15231 |
vulnerable | 2026-06-08 07:06:35.911309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15230 |
vulnerable | 2026-06-08 07:06:35.909692 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.