M3
Product
M3
45
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 19High 26Medium 0Low 0
Watch
Add M3 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-9299 | 9.8 | Aug 21 | Tenda M3 getMasterPassengerAnalyseData formGetMasterPassengerAnalyseData stack-based overflow Affected: 1.0.0.12 |
| CVE-2025-9298 | 9.8 | Aug 21 | Tenda M3 QuickIndex formQuickIndex stack-based overflow Affected: 1.0.0.12 |
| CVE-2023-51094 | 9.8 | Dec 26 | Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet Affected: 1.0.0.12(4856) |
| CVE-2023-51093 | 9.8 | Dec 26 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo Affected: 1.0.0.12(4856) |
| CVE-2023-51092 | 9.8 | Dec 26 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade Affected: 1.0.0.12(4856) |
| CVE-2023-51091 | 9.8 | Dec 26 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler Affected: 1.0.0.12(4856) |
| CVE-2023-51090 | 9.8 | Dec 26 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig Affected: 1.0.0.12(4856) |
| CVE-2023-51095 | 9.8 | Dec 26 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy Affected: 1.0.0.12(4856) |
| CVE-2022-27083 | 9.8 | Mar 24 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic Affected: 1.0.0.12(4856) |
| CVE-2022-27082 | 9.8 | Mar 24 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo Affected: 1.0.0.12(4856) |
| CVE-2022-27081 | 9.8 | Mar 24 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo Affected: 1.0.0.12(4856) |
| CVE-2022-27080 | 9.8 | Mar 24 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode Affected: 1.0.0.12(4856) |
| CVE-2022-27079 | 9.8 | Mar 24 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem Affected: 1.0.0.12(4856) |
| CVE-2022-27078 | 9.8 | Mar 24 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail Affected: 1.0.0.12(4856) |
| CVE-2022-27077 | 9.8 | Mar 24 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic Affected: 1.0.0.12(4856) |
| CVE-2022-27076 | 9.8 | Mar 24 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd Affected: 1.0.0.12(4856) |
| CVE-2022-26536 | 9.8 | Mar 24 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools Affected: 1.0.0.12(4856) |
| CVE-2022-26290 | 9.8 | Mar 24 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac Affected: 1.0.0.12(4856) |
| CVE-2022-26289 | 9.8 | Mar 24 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand Affected: 1.0.0.12(4856) |
| CVE-2026-5567 | 8.8 | Apr 5 | Tenda M3 Destination setAdvPolicyData buffer overflow Affected: 1.0.0.10 |
| CVE-2025-15253 | 8.8 | Dec 30 | Tenda M3 exeCommand stack-based overflow Affected: 1.0.0.13(4903) |
| CVE-2025-15252 | 8.8 | Dec 30 | Tenda M3 setDhcpAP formSetRemoteDhcpForAp stack-based overflow Affected: 1.0.0.13(4903) |
| CVE-2025-15234 | 8.8 | Dec 30 | Tenda M3 setInternetLanInfo formSetRemoteInternetLanInfo heap-based overflow Affected: 1.0.0.13(4903) |
| CVE-2025-15233 | 8.8 | Dec 30 | Tenda M3 setAdInfoDetail formSetAdInfoDetails heap-based overflow Affected: 1.0.0.13(4903) |
| CVE-2025-15232 | 8.8 | Dec 30 | Tenda M3 setAdPushInfo formSetAdPushInfo stack-based overflow Affected: 1.0.0.13(4903) |
| CVE-2025-15231 | 8.8 | Dec 30 | Tenda M3 setVlanInfo formSetRemoteVlanInfo stack-based overflow Affected: 1.0.0.13(4903) |
| CVE-2025-15230 | 8.8 | Dec 30 | Tenda M3 setVlanPolicyData formSetVlanPolicy heap-based overflow Affected: 1.0.0.13(4903) |
| CVE-2022-38571 | 7.5 | Aug 28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow in the function formSetGuideListItem Affected: 1.0.0.12(4856) |
| CVE-2022-38570 | 7.5 | Aug 28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelPushedAd Affected: 1.0.0.12(4856) |
| CVE-2022-38569 | 7.5 | Aug 28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelAd Affected: 1.0.0.12(4856) |
| CVE-2022-38568 | 7.5 | Aug 28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools Affected: 1.0.0.12(4856) |
| CVE-2022-38567 | 7.5 | Aug 28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo Affected: 1.0.0.12(4856) |
| CVE-2022-38566 | 7.5 | Aug 28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest Affected: 1.0.0.12(4856) |
| CVE-2022-38565 | 7.5 | Aug 28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest Affected: 1.0.0.12(4856) |
| CVE-2022-38564 | 7.5 | Aug 28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem Affected: 1.0.0.12(4856) |
| CVE-2022-38563 | 7.5 | Aug 28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools Affected: 1.0.0.12(4856) |
| CVE-2022-38562 | 7.5 | Aug 28 | Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools Affected: 1.0.0.12(4856) |
| CVE-2022-32043 | 7.5 | Jul 1 | Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo Affected: 1.0.0.12 |
| CVE-2022-32041 | 7.5 | Jul 1 | Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData Affected: 1.0.0.12 |
| CVE-2022-32040 | 7.5 | Jul 1 | Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm Affected: 1.0.0.12 |
| CVE-2022-32039 | 7.5 | Jul 1 | Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClient Affected: 1.0.0.12 |
| CVE-2022-32037 | 7.5 | Jul 1 | Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg Affected: 1.0.0.12 |
| CVE-2022-32036 | 7.5 | Jul 1 | Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb Affected: 1.0.0.12 |
| CVE-2022-32035 | 7.5 | Jul 1 | Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng Affected: 1.0.0.12 |
| CVE-2022-32034 | 7.5 | Jul 1 | Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the function formdelMasteraclist Affected: 1.0.0.12 |
Showing 45