CVE-2025-15234 | Tenda M3 1.0.0.13(4903) setInternetLanInfo formSetRemoteInternetLanInfo portIp/portMask/portGateWay/portDns/portSecDns heap-based overflow

A vulnerability marked as critical has been reported in Tenda M3 1.0.0.13(4903). Impacted is the function formSetRemoteInternetLanInfo of the file /goform/setInternetLanInfo. This manipulation of the argument portIp/portMask/portGateWay/portDns/portSecDns causes heap-based buffer overflow.

The identification of this vulnerability is CVE-2025-15234. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.