CVE-2025-15253

None

CVSS

—

EPSS

0.7%

Published

Dec 30, 2025

CISA due date

—

The record

A vulnerability has been found in Tenda M3 1.0.0.13(4903). The impacted element is an unknown function of the file /goform/exeCommand. Such manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected packages

Ecosystem	Package	Introduced	Fixed