High · published December 30, 2025
🚨 A remote attacker can trigger a stack-based buffer overflow in Tenda M3 with just a simple payload! ⚡ Think of this vulnerability like a delivery service that accepts packages without checking the contents first; if an attacker sends a carefully crafted request, it could overflow and crash the whole operation, letting them take control. 📦 This vulnerability could let an attacker remotely execute malicious code, gaining full control over the device. Imagine your router suddenly changing settings, exposing your network, or even being turned into a part of a botnet! That's absolutely devastating! 🔥
Think of this vulnerability like a delivery service that accepts packages without checking the contents first; if an attacker sends a carefully crafted request, it could overflow and crash the whole operation, letting them take control. 📦 The issue arises in the function formSetAdPushInfo due to improper input validation on the mac/terminal argument, leading to a stack-based buffer overflow that can be exploited remotely.
This vulnerability could let an attacker remotely execute malicious code, gaining full control over the device. Imagine your router suddenly changing settings, exposing your network, or even being turned into a part of a botnet! That's absolutely devastating! 🔥 To protect yourself, update Tenda M3 to the latest firmware version as soon as it's available, and consider disabling remote access features if they're not necessary. Regularly check for updates to keep security tight! 🛡️ You've got this! Stay proactive and keep your devices secured! 💪✅
| Product | Versions | Fixed in |
|---|---|---|
| tenda/m3_firmware | all versions | — |