VendorsTendam3_firmware1.0.0.12\(4856\)
Vulnerabilities

Tenda M3 Firmware 1.0.0.12\(4856\)

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

27CVEs
CVE-2022-27083
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic.
Published 2022-03-23 · Modified
10.0EPSS 0.028
CVE-2022-27082
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo.
Published 2022-03-23 · Modified
10.0EPSS 0.027
CVE-2022-26290
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-26536
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-27076
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-27077
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-27078
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-27079
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-27080
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-27081
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2022-26289
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand.
Published 2022-03-23 · Modified
10.0EPSS 0.026
CVE-2023-51092
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.
Published 2023-12-26 · Modified
9.8EPSS 0.129
CVE-2023-51091
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler.
Published 2023-12-26 · Modified
9.8EPSS 0.085
CVE-2023-51094
Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet.
Published 2023-12-26 · Modified
9.8EPSS 0.011
CVE-2023-51093
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo.
Published 2023-12-26 · Modified
9.8EPSS 0.008
CVE-2023-51095
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.
Published 2023-12-26 · Modified
9.8EPSS 0.008
CVE-2023-51090
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig.
Published 2023-12-26 · Modified
9.8EPSS 0.007
CVE-2022-38567
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the authIPs parameter.
Published 2022-08-28 · Modified
7.5EPSS 0.010
CVE-2022-38568
Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service (DoS) via the hostname parameter.
Published 2022-08-28 · Modified
7.5EPSS 0.010
CVE-2022-38569
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelAd.
Published 2022-08-28 · Modified
7.5EPSS 0.010
CVE-2022-38570
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelPushedAd. This vulnerability allows attackers to cause a Denial of Service (DoS) via the adPushUID parameter.
Published 2022-08-28 · Modified
7.5EPSS 0.010
CVE-2022-38571
Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow in the function formSetGuideListItem.
Published 2022-08-28 · Modified
7.5EPSS 0.010
CVE-2022-38566
Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mailname parameter.
Published 2022-08-28 · Modified
7.5EPSS 0.010
CVE-2022-38565
Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mailpwd parameter.
Published 2022-08-28 · Modified
7.5EPSS 0.010
CVE-2022-38564
Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem. This vulnerability allows attackers to cause a Denial of Service (DoS) via the adItemUID parameter.
Published 2022-08-28 · Modified
7.5EPSS 0.010
CVE-2022-38563
Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service (DoS) via the MACAddr parameter.
Published 2022-08-28 · Modified
7.5EPSS 0.010
CVE-2022-38562
Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service (DoS) via the lan parameter.
Published 2022-08-28 · Modified
7.5EPSS 0.010