Note:
This project will be discontinued after December 13, 2021. [more]
Product:
M3_firmware
(Tenda)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 35 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2022-03-24 | CVE-2022-26289 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand. | M3_firmware | 9.8 | ||
| 2022-03-24 | CVE-2022-26290 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac. | M3_firmware | 9.8 | ||
| 2022-03-24 | CVE-2022-26536 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools. | M3_firmware | 9.8 | ||
| 2022-03-24 | CVE-2022-27076 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd. | M3_firmware | 9.8 | ||
| 2022-03-24 | CVE-2022-27077 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic. | M3_firmware | 9.8 | ||
| 2022-03-24 | CVE-2022-27078 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail. | M3_firmware | 9.8 | ||
| 2022-03-24 | CVE-2022-27079 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem. | M3_firmware | 9.8 | ||
| 2022-03-24 | CVE-2022-27080 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode. | M3_firmware | 9.8 | ||
| 2022-03-24 | CVE-2022-27081 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo. | M3_firmware | 9.8 | ||
| 2022-03-24 | CVE-2022-27082 | Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo. | M3_firmware | 9.8 |