Tenda M3 缓冲区错误漏洞

Tenda M3 is an access controller from Tenda, China. Tenda M3 v1.0.0.12 is vulnerable to a stack overflow vulnerability that stems from the formGetPassengerAnalyseData function not checking the length of the input data. An attacker could exploit this vulnerability to cause a denial of service atta...

PT-2022-21067 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.12 Description: A stack overflow issue was discovered in the function formGetPassengerAnalyseData. Recommendations: For Tenda M3 version 1.0.0.12, at the moment, there is no information about a newer version that contai...

PT-2022-21062 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.12 Description: A stack overflow issue was discovered via the formMasterMng function. Recommendations: For Tenda M3 version 1.0.0.12, consider disabling the formMasterMng function until a patch is available. At the...

Tenda M3 缓冲区错误漏洞

Tenda M3 is an access controller from Tenda, China. Tenda M3 version V1.0.0.12 is vulnerable to a stack overflow vulnerability, which stems from the formSetCfm function not checking the length of input data. An attacker could exploit this vulnerability to cause a denial of service attack...

PT-2022-21066 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.12 Description: A stack overflow issue was discovered via the function formSetCfm. Recommendations: For Tenda M3 version 1.0.0.12, at the moment, there is no information about a newer version that contains a fix for thi...

PT-2022-21065 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.12 Description: A stack overflow issue was discovered via the listN parameter in the fromDhcpListClient function. Recommendations: For Tenda M3 version 1.0.0.12, consider restricting access to the fromDhcpListClient...

Tenda M3 缓冲区错误漏洞

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 V1.0.0.12 version has a stack overflow vulnerability, which stems from the formMasterMng function url parameter not checking its length for input data. An attacker could exploit this vulnerability to cause a denial of service...

Tenda M3 缓冲区错误漏洞

Tenda M3 is an access controller from Tenda, China. buffer overflow vulnerability exists in Tenda M3 V1.0.0.12, which stems from the ssidList, storeName, trademark parameters of the formSetStoreWeb function that do not check the length of the input data. An attacker can exploit this vulnerability...

PT-2022-7318 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.12 Description: The issue is related to a stack overflow in the formSetAccessCodeInfo function, which can be exploited to cause a denial of service. This can be achieved by a remote attacker. The vulnerable function is...

PT-2022-21064 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.12 Description: A stack overflow issue was discovered via the function formSetAPCfg. This issue may allow for exploitation, potentially leading to unauthorized access or control. No information is available regarding th...

Tenda M3 缓冲区错误漏洞

Tenda M3 is an access controller from Tenda, China. Tenda M3 v1.0.0.12 is vulnerable to a stack overflow vulnerability, which stems from the fact that the items parameter of the formSetAccessCodeInfo function does not check the length of the input data. An attacker could exploit this vulnerabilit...

PT-2022-21061 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.12 Description: A stack overflow issue was discovered via the items parameter in the formdelMasteraclist function. Recommendations: For Tenda M3 version 1.0.0.12, consider restricting access to the formdelMasteraclist...

Tenda M3 Command Injection Vulnerability (CNVD-2022-33115)

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /cgi-bin/uploadAccessCodePic fails to properly filter the construction of command special characters, commands, etc., which can be exploited by attackers to cau...

Tenda M3 Command Injection Vulnerability (CNVD-2022-33120)

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /goform/setFixTools fails to properly filter the construct command special characters, commands, etc., and can be exploited by attackers to cause arbitrary...

Tenda M3 Command Injection Vulnerability (CNVD-2022-33122)

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 has a command injection vulnerability, which originates from the component /goform/exeCommand fails to properly filter the construction of command special characters, commands, etc., which can be exploited by attackers to cause...

Tenda M3 Command Injection Vulnerability (CNVD-2022-33121)

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /goform/setAdInfoDetail fails to properly filter the construction of command special characters, commands, etc., and can be exploited by attackers to cause...

Tenda M3 command injection vulnerability

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the failure of the component /goform/delAd to properly filter the construction of command special characters, commands, etc. An attacker could use this vulnerability to cause...

Tenda M3 Command Injection Vulnerability (CNVD-2022-33117)

Tenda M3 is an access control from Tenda, a Chinese company. Tenda M3 is vulnerable to command injection, which stems from the component /goform/setPicListItem fails to properly filter the construct command special characters, commands, etc., and can be exploited by attackers to cause arbitrary...

CVE-2022-26290

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac...

CVE-2022-27077

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic...