Vulnerabilities > Tenda > M3 Firmware
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-07-01 | CVE-2022-32039 | Out-of-bounds Write vulnerability in Tenda M3 Firmware 1.0.0.12 Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClient. | 7.5 |
| 2022-07-01 | CVE-2022-32040 | Out-of-bounds Write vulnerability in Tenda M3 Firmware 1.0.0.12 Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm. | 7.5 |
| 2022-07-01 | CVE-2022-32041 | Out-of-bounds Write vulnerability in Tenda M3 Firmware 1.0.0.12 Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData. | 7.5 |
| 2022-07-01 | CVE-2022-32043 | Out-of-bounds Write vulnerability in Tenda M3 Firmware 1.0.0.12 Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo. | 7.5 |
| 2022-03-24 | CVE-2022-26289 | OS Command Injection vulnerability in Tenda M3 Firmware 1.0.0.12(4856) Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand. | 9.8 |
| 2022-03-24 | CVE-2022-26290 | OS Command Injection vulnerability in Tenda M3 Firmware 1.0.0.12(4856) Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac. | 9.8 |
| 2022-03-24 | CVE-2022-26536 | Command Injection vulnerability in Tenda M3 Firmware 1.0.0.12(4856) Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools. | 9.8 |
| 2022-03-24 | CVE-2022-27076 | Command Injection vulnerability in Tenda M3 Firmware 1.0.0.12(4856) Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd. | 9.8 |
| 2022-03-24 | CVE-2022-27077 | Command Injection vulnerability in Tenda M3 Firmware 1.0.0.12(4856) Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic. | 9.8 |
| 2022-03-24 | CVE-2022-27078 | Command Injection vulnerability in Tenda M3 Firmware 1.0.0.12(4856) Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail. | 9.8 |