CVE-2025-9299: Tenda M3 getMasterPassengerAnalyseData formGetMasterPassengerAnalyseData stack-based overflow
A vulnerability has been found in Tenda M3 1.0.0.12. Affected by this vulnerability is the function formGetMasterPassengerAnalyseData of the file /goform/getMasterPassengerAnalyseData. The manipulation of the argument Time leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9299?
CVE-2025-9299 is classified as a critical vulnerability due to its potential for remote code execution through stack-based buffer overflow.
How do I fix CVE-2025-9299?
To fix CVE-2025-9299, it is recommended to update the Tenda M3 firmware to the latest version provided by the manufacturer.
What products are affected by CVE-2025-9299?
CVE-2025-9299 affects the Tenda M3 version 1.0.0.12.
What type of vulnerability is CVE-2025-9299?
CVE-2025-9299 is a stack-based buffer overflow vulnerability.
Can CVE-2025-9299 allow unauthorized access?
Yes, CVE-2025-9299 can potentially allow unauthorized access or execution of arbitrary code on the affected device.