Tenda M3 vulnerabilities, page 2

45 vulnerabilities

Known vulnerabilities in Tenda M3, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2022-38565tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mailpwd parameter.EPSS0.99%7.5HighCVE-2022-38567tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the authIPs parameter.EPSS0.99%7.5HighCVE-2022-38563tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service (DoS) via the MACAddr parameter.EPSS0.99%7.5HighCVE-2022-38570tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelPushedAd. This vulnerability allows attackers to cause a Denial of Service (DoS) via the adPushUID parameter.EPSS0.99%7.5HighCVE-2022-38571tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow in the function formSetGuideListItem.EPSS0.99%7.5HighCVE-2022-38566tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. This vulnerability allows attackers to cause a Denial of Service (DoS) via the mailname parameter.EPSS0.99%7.5HighCVE-2022-38569tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelAd.EPSS0.99%7.5HighCVE-2022-38564tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem. This vulnerability allows attackers to cause a Denial of Service (DoS) via the adItemUID parameter.EPSS0.99%7.5HighCVE-2022-38562tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service (DoS) via the lan parameter.EPSS0.99%7.5HighCVE-2022-38568tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools. This vulnerability allows attackers to cause a Denial of Service (DoS) via the hostname parameter.EPSS0.99%7.8HighCVE-2022-32034tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the function formdelMasteraclist.EPSS1.16%7.5HighCVE-2022-32041tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData.EPSS1.14%7.5HighCVE-2022-32043tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo.EPSS1.14%7.8HighCVE-2022-32035tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng.EPSS14.81%7.5HighCVE-2022-32037tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg.EPSS1.14%7.5HighCVE-2022-32040tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm.EPSS1.14%7.5HighCVE-2022-32039tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClient.EPSS1.14%7.8HighCVE-2022-32036tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb.EPSS1.16%9CriticalCVE-2026-5567tenda · m3_firmwareTenda M3 Destination setAdvPolicyData buffer overflowA flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Executing a manipulation of the argument policyType can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.EPSS1.01%9.8CriticalCVE-2023-51095tenda · m3_firmwaretenda m3_firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.EPSS0.76%