CVE-2025-9299 | Tenda M3 1.0.0.12 getMasterPassengerAnalyseData formGetMasterPassengerAnalyseData Time stack-based overflow

A vulnerability identified as critical has been detected in Tenda M3 1.0.0.12. Affected by this vulnerability is the function formGetMasterPassengerAnalyseData of the file /goform/getMasterPassengerAnalyseData. The manipulation of the argument Time leads to stack-based buffer overflow.

This vulnerability is listed as CVE-2025-9299. The attack may be initiated remotely. In addition, an exploit is available.