VendorsTendam3any version
Vulnerabilities

Tenda M3 any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

45CVEs
CVE-2022-27083
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic.
Published 2022-03-23 · Modified
10.0EPSS 0.028
CVE-2022-27082
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo.
Published 2022-03-23 · Modified
10.0EPSS 0.027
CVE-2022-27076
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-27081
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-27077
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-26289
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-27080
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-27078
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-26290
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-27079
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-26536
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2023-51092
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.
Published 2023-12-26 · Modified
9.8EPSS 0.129
CVE-2023-51091
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler.
Published 2023-12-26 · Modified
9.8EPSS 0.085
CVE-2025-9299
Tenda M3 getMasterPassengerAnalyseData formGetMasterPassengerAnalyseData stack-based overflow
Published 2025-08-21 · Analyzed
9.8EPSS 0.049
CVE-2025-9298
Tenda M3 QuickIndex formQuickIndex stack-based overflow
Published 2025-08-21 · Analyzed
9.8EPSS 0.011
CVE-2023-51094
Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet.
Published 2023-12-26 · Modified
9.8EPSS 0.011
CVE-2023-51093
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo.
Published 2023-12-26 · Modified
9.8EPSS 0.008
CVE-2023-51095
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.
Published 2023-12-26 · Modified
9.8EPSS 0.008
CVE-2023-51090
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig.
Published 2023-12-26 · Modified
9.8EPSS 0.007
CVE-2025-15252
Tenda M3 setDhcpAP formSetRemoteDhcpForAp stack-based overflow
Published 2025-12-30 · Analyzed
9.0EPSS 0.033
CVE-2025-15234
Tenda M3 setInternetLanInfo formSetRemoteInternetLanInfo heap-based overflow
Published 2025-12-30 · Modified
9.0EPSS 0.028
CVE-2025-15231
Tenda M3 setVlanInfo formSetRemoteVlanInfo stack-based overflow
Published 2025-12-30 · Modified
9.0EPSS 0.007
CVE-2025-15233
Tenda M3 setAdInfoDetail formSetAdInfoDetails heap-based overflow
Published 2025-12-30 · Modified
9.0EPSS 0.007
CVE-2025-15232
Tenda M3 setAdPushInfo formSetAdPushInfo stack-based overflow
Published 2025-12-30 · Analyzed
9.0EPSS 0.007
CVE-2025-15253
Tenda M3 exeCommand stack-based overflow
Published 2025-12-30 · Analyzed
9.0EPSS 0.007
CVE-2025-15230
Tenda M3 setVlanPolicyData formSetVlanPolicy heap-based overflow
Published 2025-12-30 · Modified
9.0EPSS 0.007
CVE-2026-5567
Tenda M3 Destination setAdvPolicyData buffer overflow
Published 2026-04-05 · Analyzed
9.0EPSS 0.006
CVE-2022-32035
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng.
Published 2022-07-01 · Modified
7.8EPSS 0.148
CVE-2022-32034
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the function formdelMasteraclist.
Published 2022-07-01 · Modified
7.8EPSS 0.012
CVE-2022-32036
Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb.
Published 2022-07-01 · Modified
7.8EPSS 0.012
CVE-2022-32039
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClient.
Published 2022-07-01 · Modified
7.5EPSS 0.011
CVE-2022-32040
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm.
Published 2022-07-01 · Modified
7.5EPSS 0.011
CVE-2022-32041
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData.
Published 2022-07-01 · Modified
7.5EPSS 0.011
CVE-2022-32043
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo.
Published 2022-07-01 · Modified
7.5EPSS 0.011
CVE-2022-32037
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg.
Published 2022-07-01 · Modified
7.5EPSS 0.011
CVE-2022-38562
Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service (DoS) via the lan parameter.
Published 2022-08-28 · Modified
7.5EPSS 0.010
CVE-2022-38563
Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service (DoS) via the MACAddr parameter.
Published 2022-08-28 · Modified
7.5EPSS 0.010
CVE-2022-38564
Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem. This vulnerability allows attackers to cause a Denial of Service (DoS) via the adItemUID parameter.
Published 2022-08-28 · Modified
7.5EPSS 0.010
CVE-2022-38565
Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mailpwd parameter.
Published 2022-08-28 · Modified
7.5EPSS 0.010
CVE-2022-38566
Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mailname parameter.
Published 2022-08-28 · Modified
7.5EPSS 0.010
1 / 2Next →