M3 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:m3_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | M3 Firmware (312ff193-b74f-5381-b4be-e30dc2155d37) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5567 |
vulnerable | 2026-06-08 08:07:03.842437 |
Tenda M3 Destination setAdvPolicyData buffer overflow
HIGH (8.8)
A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Executing a manipulation of the argument policyType can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.
Published: 2026-04-05T12:45:14.699Z
Updated: 2026-04-06T14:50:41.855Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15253 |
vulnerable | 2026-06-08 07:06:35.942474 |
Tenda M3 exeCommand stack-based overflow
HIGH (8.8)
A vulnerability has been found in Tenda M3 1.0.0.13(4903). The impacted element is an unknown function of the file /goform/exeCommand. Such manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-12-30T15:02:06.940Z
Updated: 2026-02-24T06:17:18.964Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15252 |
vulnerable | 2026-06-08 07:06:35.941970 |
Tenda M3 setDhcpAP formSetRemoteDhcpForAp stack-based overflow
HIGH (8.8)
A flaw has been found in Tenda M3 1.0.0.13(4903). The affected element is the function formSetRemoteDhcpForAp of the file /goform/setDhcpAP. This manipulation of the argument startip/endip/leasetime/gateway/dns1/dns2 causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.
Published: 2025-12-30T14:32:07.886Z
Updated: 2026-02-24T06:17:05.099Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15234 |
vulnerable | 2026-06-08 07:06:35.912572 |
Tenda M3 setInternetLanInfo formSetRemoteInternetLanInfo heap-based overflow
HIGH (8.8)
A weakness has been identified in Tenda M3 1.0.0.13(4903). Impacted is the function formSetRemoteInternetLanInfo of the file /goform/setInternetLanInfo. This manipulation of the argument portIp/portMask/portGateWay/portDns/portSecDns causes heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2025-12-30T08:32:06.259Z
Updated: 2026-02-24T06:15:36.216Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15233 |
vulnerable | 2026-06-08 07:06:35.912231 |
Tenda M3 setAdInfoDetail formSetAdInfoDetails heap-based overflow
HIGH (8.8)
A security flaw has been discovered in Tenda M3 1.0.0.13(4903). This issue affects the function formSetAdInfoDetails of the file /goform/setAdInfoDetail. The manipulation of the argument adName/smsPassword/smsAccount/weixinAccount/weixinName/smsSignature/adRedirectUrl/adCopyRight/smsContent/adItemUID results in heap-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
Published: 2025-12-30T08:02:06.822Z
Updated: 2026-02-24T06:15:19.863Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15232 |
vulnerable | 2026-06-08 07:06:35.911699 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15231 |
vulnerable | 2026-06-08 07:06:35.911150 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15230 |
vulnerable | 2026-06-08 07:06:35.908472 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.