CVE-2025-15232

The CVE affects Tenda M3 firmware 1.0.0.13(4903). The bug is in the formSetAdPushInfo function of /goform/setAdPushInfo, where manipulating the mac/terminal argument causes a stack-based buffer overflow. This enables remote exploitation, and an exploit is publicly available. Public sources (PT-20...