Lucene search

M3 Firmware Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2022-26289

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand.

9.8CVSS

9.8AI Score

0.005EPSS

2022-03-24 12:15 AM

cve

CVE-2022-26290

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac.

9.8CVSS

9.7AI Score

0.005EPSS

2022-03-24 12:15 AM

cve

CVE-2022-26536

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools.

9.8CVSS

9.8AI Score

0.005EPSS

2022-03-24 12:15 AM

cve

CVE-2022-27076

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd.

9.8CVSS

9.7AI Score

0.005EPSS

2022-03-24 12:15 AM

cve

CVE-2022-27077

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic.

9.8CVSS

9.7AI Score

0.005EPSS

2022-03-24 12:15 AM

cve

CVE-2022-27078

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail.

9.8CVSS

9.7AI Score

0.005EPSS

2022-03-24 12:15 AM

cve

CVE-2022-27079

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem.

9.8CVSS

9.7AI Score

0.005EPSS

2022-03-24 12:15 AM

cve

CVE-2022-27080

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode.

9.8CVSS

9.7AI Score

0.005EPSS

2022-03-24 12:15 AM

cve

CVE-2022-27081

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo.

9.8CVSS

9.7AI Score

0.005EPSS

2022-03-24 12:15 AM

cve

CVE-2022-27082

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo.

9.8CVSS

9.7AI Score

0.005EPSS

2022-03-24 12:15 AM

cve

CVE-2022-27083

Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic.

9.8CVSS

9.7AI Score

0.005EPSS

2022-03-24 12:15 AM

cve

CVE-2023-51090

Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig.

9.8CVSS

9.6AI Score

0.001EPSS

2023-12-26 06:15 PM

cve

CVE-2023-51091

Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler.

9.8CVSS

9.6AI Score

0.001EPSS

2023-12-26 06:15 PM

cve

CVE-2023-51092

Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.

9.8CVSS

9.6AI Score

0.001EPSS

2023-12-26 06:15 PM

cve

CVE-2023-51093

Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo.

9.8CVSS

9.6AI Score

0.001EPSS

2023-12-26 06:15 PM

cve

CVE-2023-51094

Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet.

9.8CVSS

9.6AI Score

0.002EPSS

2023-12-26 06:15 PM

cve

CVE-2023-51095

Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.

9.8CVSS

9.6AI Score

0.001EPSS

2023-12-26 05:15 PM