CVE-2025-15231 in Tenda

Résumé

par MITRE • 30/12/2025

A vulnerability was determined in Tenda M3 1.0.0.13(4903). This affects the function formSetRemoteVlanInfo of the file /goform/setVlanInfo. Executing manipulation of the argument ID/vlan/port can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: VulDB
• Divulgation: 30/12/2025
• Modérer: accepté
• Entrée: VDB-338627
• CPE: prêt
• CWE: CWE-121 (confirmé)
• Exploitation: Télécharger
• CVSS: 8.8 (CNA)
• EPSS: 0.00658
• KEV: non
• Activités: très faible
• Secteur: Pharma, Lawfirm, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-15231
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-15231
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-15231/