Tenda M3 安全漏洞

Tenda M3 is a wireless controller AC from Tenda, which is aimed at scenarios such as hotel chains, low-star hotels and small and medium-sized businesses. Tenda M3 there is a stack buffer overflow vulnerability, the vulnerability stems from /goform/getMasterPassengerAnalyseData file in the...

PT-2025-34212 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.12 Description: A vulnerability has been identified in the Tenda M3 device. The formGetMasterPassengerAnalyseData function within the /goform/getMasterPassengerAnalyseData file is susceptible to a stack-based buffer...

MAL-2025-21070 Malicious code in fusion-plugin-m3-react (npm)

The package fusion-plugin-m3-react was found to contain malicious code...

Malicious code in @zalastax/nolb-m3 (npm)

The package @zalastax/nolb-m3 was found to contain malicious code...

Malicious code in fusion-plugin-m3-react (npm)

The package fusion-plugin-m3-react was found to contain malicious code...

MAL-2025-12285 Malicious code in @zalastax/nolb-m3 (npm)

The package @zalastax/nolb-m3 was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2021-46969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Fix invalid error returning in mhiqueue mhiqueue returns an error when the...

GHSA-RRMW-GV85-W824 pywasm3 has Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability has been found in wasm3 0.5.0 and classified as problematic. This vulnerability affects the function MarkSlotAllocated of the file source/m3compile.c. The manipulation leads to out-of-bounds write. An attack has to be approached locally. The exploit has been disclosed to the publi...

CVE-2023-51091

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function R7WebsSecurityHandler...

CVE-2023-51095

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function formDelWlRfPolicy...

CVE-2023-51093

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function fromSetLocalVlanInfo...

CVE-2023-51090

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function formGetWeiXinConfig...

CVE-2023-51094

Tenda M3 V1.0.0.124856 was discovered to contain a Command Execution vulnerability via the function TendaTelnet...

CVE-2023-51092

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function upgrade...

CVE-2022-32040

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm...

CVE-2022-32041

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData...

CVE-2022-27079

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setPicListItem...

CVE-2022-27080

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...

CVE-2022-38567

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. This vulnerability allows attackers to cause a Denial of Service DoS via the authIPs parameter...

CVE-2022-38564

Tenda M3 V1.0.0.124856 was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem. This vulnerability allows attackers to cause a Denial of Service DoS via the adItemUID parameter...