Priority HIGH 76
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.12913 · Published 2023-12-26 · No fix listed CWE-787
Priority HIGH 73
A flaw has been found in Tenda M3 1.0.0.10.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00644 · Published 2026-04-05 · No fix listed CWE-119
Priority HIGH 73
A vulnerability has been found in Tenda M3 1.0.0.13(4903).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00736 · Published 2025-12-30 · No fix listed CWE-119
Priority HIGH 73
A flaw has been found in Tenda M3 1.0.0.13(4903).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.03327 · Published 2025-12-30 · No fix listed CWE-119
Priority HIGH 73
A weakness has been identified in Tenda M3 1.0.0.13(4903).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.02878 · Published 2025-12-30 · No fix listed CWE-119
Priority HIGH 73
A security flaw has been discovered in Tenda M3 1.0.0.13(4903).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00736 · Published 2025-12-30 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was identified in Tenda M3 1.0.0.13(4903).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00736 · Published 2025-12-30 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was determined in Tenda M3 1.0.0.13(4903).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00736 · Published 2025-12-30 · No fix listed CWE-119
Priority HIGH 73
A vulnerability was found in Tenda M3 1.0.0.13(4903).
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00736 · Published 2025-12-30 · No fix listed CWE-119
Priority HIGH 73
A vulnerability has been found in Tenda M3 1.0.0.12.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.05488 · Published 2025-08-21 · No fix listed CWE-119
Priority HIGH 73
A flaw has been found in Tenda M3 1.0.0.12.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01165 · Published 2025-08-21 · No fix listed CWE-119
Priority MEDIUM 53
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08459 · Published 2023-12-26 · No fix listed CWE-787
Priority MEDIUM 49
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04037 · Published 2022-03-23 · No fix listed CWE-78
Priority MEDIUM 48
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.14814 · Published 2022-07-01 · No fix listed CWE-787
Priority MEDIUM 47
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02844 · Published 2022-03-23 · No fix listed CWE-77
Priority MEDIUM 47
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02702 · Published 2022-03-23 · No fix listed CWE-77
Priority MEDIUM 47
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02628 · Published 2022-03-23 · No fix listed CWE-77
Priority MEDIUM 47
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02628 · Published 2022-03-23 · No fix listed CWE-77
Priority MEDIUM 47
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02628 · Published 2022-03-23 · No fix listed CWE-77
Priority MEDIUM 47
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02628 · Published 2022-03-23 · No fix listed CWE-77
Priority MEDIUM 47
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02628 · Published 2022-03-23 · No fix listed CWE-77
Priority MEDIUM 47
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02628 · Published 2022-03-23 · No fix listed CWE-77
Priority MEDIUM 47
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02628 · Published 2022-03-23 · No fix listed CWE-77
Priority MEDIUM 47
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02628 · Published 2022-03-23 · No fix listed CWE-78
Priority MEDIUM 44
Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0105 · Published 2023-12-26 · No fix listed CWE-78
Load more
THREATIST.IORead the docs