CVE-2025-15234

A weakness has been identified in Tenda M3 1.0.0.13(4903). Impacted is the function formSetRemoteInternetLanInfo of the file /goform/setInternetLanInfo. This manipulation of the argument portIp/portMask/portGateWay/portDns/portSecDns causes heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.

• CWE-119
• CWE-122

• https://github.com/dwBruijn/CVEs/blob/main/Tenda/setRemoteInternetLanInfo.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.338630Permissions Required, VDB Entry
• https://vuldb.com/?id.338630Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.725496Third Party Advisory, VDB Entry
• https://www.tenda.com.cn/Product

Published

Dec 30, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15229A vulnerability has been found in Tenda CH22 up to 1.0.0.1. …7.5
• CVE-2025-1523The Ultimate Dashboard WordPress plugin before 3.8.6 does n…3.5
• CVE-2025-15230A vulnerability was found in Tenda M3 1.0.0.13(4903). Affect…8.8
• CVE-2025-15231A vulnerability was determined in Tenda M3 1.0.0.13(4903). T…8.8
• CVE-2025-15232A vulnerability was identified in Tenda M3 1.0.0.13(4903). T…8.8
• CVE-2025-15233A security flaw has been discovered in Tenda M3 1.0.0.13(490…8.8
• CVE-2025-15235QOCA aim AI Medical Cloud Platform developed by Quanta Compu…7.1
• CVE-2025-15236QOCA aim AI Medical Cloud Platform developed by Quanta Compu…5.3
• CVE-2025-15237QOCA aim AI Medical Cloud Platform developed by Quanta Compu…5.3
• CVE-2025-15238QOCA aim AI Medical Cloud Platform developed by Quanta Compu…7.1
• CVE-2025-15239QOCA aim AI Medical Cloud Platform developed by Quanta Compu…7.1
• CVE-2025-1524The Ultimate Dashboard WordPress plugin before 3.8.6 does n…3.5