← Back

M3 Firmware

m3_firmware

Vendor: Tenda • 45 CVEs

CVEs (45)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tenda
1M3 Firmware
Nov 21, 2024
Aug 28, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the authIPs parameter.
1Tenda
1M3 Firmware
Nov 21, 2024
Aug 28, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mailname parameter.
1Tenda
1M3 Firmware
Nov 21, 2024
Aug 28, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mailpwd parameter.
1Tenda
1M3 Firmware
Nov 21, 2024
Aug 28, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem. This vulnerability allows attackers to cause a Denial of Service (DoS) via the adItemUID parameter.
1Tenda
1M3 Firmware
Nov 21, 2024
Aug 28, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service (DoS) via the MACAddr parameter.
1Tenda
1M3 Firmware
Nov 21, 2024
Aug 28, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service (DoS) via the lan parameter.
1Tenda
1M3 Firmware
Nov 21, 2024
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo.
1Tenda
1M3 Firmware
Nov 21, 2024
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData.
1Tenda
1M3 Firmware
Nov 21, 2024
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm.
1Tenda
1M3 Firmware
Nov 21, 2024
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClient.
1Tenda
1M3 Firmware
Nov 21, 2024
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg.
1Tenda
1M3 Firmware
Nov 21, 2024
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb.
1Tenda
1M3 Firmware
Nov 21, 2024
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng.
1Tenda
1M3 Firmware
Nov 21, 2024
Jul 1, 2022
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the function formdelMasteraclist.
1Tenda
1M3 Firmware
Nov 21, 2024
Mar 24, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic.
1Tenda
1M3 Firmware
Nov 21, 2024
Mar 24, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo.
1Tenda
1M3 Firmware
Nov 21, 2024
Mar 24, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo.
1Tenda
1M3 Firmware
Nov 21, 2024
Mar 24, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode.
1Tenda
1M3 Firmware
Nov 21, 2024
Mar 24, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem.
1Tenda
1M3 Firmware
Nov 21, 2024
Mar 24, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail.