Tenda: >> M3 Firmware >> 1.0.0.12 Security Vulnerabilities
A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
CVSS Score
8.8
EPSS Score
0.001
Published
2025-08-21
A vulnerability has been found in Tenda M3 1.0.0.12. Affected by this vulnerability is the function formGetMasterPassengerAnalyseData of the file /goform/getMasterPassengerAnalyseData. The manipulation of the argument Time leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
8.8
EPSS Score
0.001
Published
2025-08-21
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the function formdelMasteraclist.
CVSS Score
7.5
EPSS Score
0.004
Published
2022-07-01
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng.
CVSS Score
7.5
EPSS Score
0.043
Published
2022-07-01
Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb.
CVSS Score
7.5
EPSS Score
0.004
Published
2022-07-01
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-07-01
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClient.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-07-01
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-07-01
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-07-01
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-07-01
Page 1