CVE-2025-15233— Tenda M3 setAdInfoDetail formSetAdInfoDetails heap-based overflow
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-15233
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Tenda M3 setAdInfoDetail formSetAdInfoDetails heap-based overflow
Source: NVD (National Vulnerability Database)
Vulnerability Description
A security flaw has been discovered in Tenda M3 1.0.0.13(4903). This issue affects the function formSetAdInfoDetails of the file /goform/setAdInfoDetail. The manipulation of the argument adName/smsPassword/smsAccount/weixinAccount/weixinName/smsSignature/adRedirectUrl/adCopyRight/smsContent/adItemUID results in heap-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
堆缓冲区溢出
Source: NVD (National Vulnerability Database)
Vulnerability Title
Tenda M3 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Tenda M3是中国腾达（Tenda）公司的一款门禁控制器。 Tenda M3 1.0.0.13版本存在安全漏洞，该漏洞源于对文件/goform/setAdInfoDetail中参数adName/smsPassword/smsAccount/weixinAccount/weixinName/smsSignature/adRedirectUrl/adCopyRight/smsContent/adItemUID的错误操作，可能导致堆缓冲区溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-15233
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-15233
请登录查看更多情报信息。
- Submit #725495: Tenda M3 V1.0.0.13(4903) Heap-based Buffer Overflowthird-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-15233
Same Patch Batch · Tenda · 2025-12-30 · 15 CVEs total
| CVE-2025-15255 | 9.8 CRITICAL | Tenda W6-S R7websSsecurityHandler httpd stack-based overflow |
| CVE-2025-15215 | 8.8 HIGH | Tenda AC10U HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflow |
| CVE-2025-15216 | 8.8 HIGH | Tenda AC23 SetIpMacBind fromSetIpMacBind stack-based overflow |
| CVE-2025-15217 | 8.8 HIGH | Tenda AC23 HTTP POST Request formSetPPTPUserList buffer overflow |
| CVE-2025-15218 | 8.8 HIGH | Tenda AC10U POST Request Parameter AdvSetLanip fromadvsetlanip buffer overflow |
| CVE-2025-15230 | 8.8 HIGH | Tenda M3 setVlanPolicyData formSetVlanPolicy heap-based overflow |
| CVE-2025-15231 | 8.8 HIGH | Tenda M3 setVlanInfo formSetRemoteVlanInfo stack-based overflow |
| CVE-2025-15232 | 8.8 HIGH | Tenda M3 setAdPushInfo formSetAdPushInfo stack-based overflow |
| CVE-2025-15234 | 8.8 HIGH | Tenda M3 setInternetLanInfo formSetRemoteInternetLanInfo heap-based overflow |
| CVE-2025-15252 | 8.8 HIGH | Tenda M3 setDhcpAP formSetRemoteDhcpForAp stack-based overflow |
| CVE-2025-15253 | 8.8 HIGH | Tenda M3 exeCommand stack-based overflow |
| CVE-2025-15356 | 8.8 HIGH | Tenda AC20 PowerSaveSet sscanf buffer overflow |
| CVE-2025-15254 | 6.3 MEDIUM | Tenda W6-S ATE Service ate TendaAte os command injection |
| CVE-2025-15229 | 5.3 MEDIUM | Tenda CH22 DhcpListClient fromDhcpListClient denial of service |
IV. Related Vulnerabilities
Same product: M3
- CVE-2026-5567
Tenda M3 Destination setAdvPolicyData buffer overflow - CVE-2025-15253
Tenda M3 exeCommand stack-based overflow - CVE-2025-15252
Tenda M3 setDhcpAP formSetRemoteDhcpForAp stack-based overfl - CVE-2025-15234
Tenda M3 setInternetLanInfo formSetRemoteInternetLanInfo hea - CVE-2025-15232
Tenda M3 setAdPushInfo formSetAdPushInfo stack-based overflo
Same vendor: Tenda
- CVE-2026-8265
Tenda AC6 httpd getLogFile get_log_file os command injection - CVE-2026-8264
Tenda AC6 httpd WifiApScan formWifiApScan os command injecti - CVE-2026-8263
Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os comman - CVE-2026-8259
Tenda AC6 httpd telnet os command injection - CVE-2026-8138
Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based
Same weakness: CWE-122
- CVE-2026-8261
Squirrel sqobject.cpp Load heap-based overflow - CVE-2026-8213
OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow - CVE-2026-8212
OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow - CVE-2026-42309
Pillow: Heap buffer overflow with nested list coordinates - CVE-2026-45130
Vim: Heap Buffer Overflow in spell file loading
V. Comments for CVE-2025-15233
No comments yet