Vulnerabilities > Tenda > M3 Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-03-24 CVE-2022-27079 Command Injection vulnerability in Tenda M3 Firmware 1.0.0.12(4856)
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem.
network
low complexity
tenda CWE-77
critical
9.8
2022-03-24 CVE-2022-27080 Command Injection vulnerability in Tenda M3 Firmware 1.0.0.12(4856)
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode.
network
low complexity
tenda CWE-77
critical
9.8
2022-03-24 CVE-2022-27081 Command Injection vulnerability in Tenda M3 Firmware 1.0.0.12(4856)
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo.
network
low complexity
tenda CWE-77
critical
9.8
2022-03-24 CVE-2022-27082 Command Injection vulnerability in Tenda M3 Firmware 1.0.0.12(4856)
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo.
network
low complexity
tenda CWE-77
critical
9.8
2022-03-24 CVE-2022-27083 Command Injection vulnerability in Tenda M3 Firmware 1.0.0.12(4856)
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic.
network
low complexity
tenda CWE-77
critical
9.8