Approved changes feed: RSS · Atom

cpe:2.3:a:tenda:w3:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductW3 (00b0b4f1-6357-5b8f-98fa-9e787c941d87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4008 vulnerable 2026-06-08 08:05:12.488556 Tenda W3 POST Parameter wifiSSIDset stack-based overflow
HIGH (8.8)
A flaw has been found in Tenda W3 1.0.0.3(2204). This issue affects some unknown processing of the file /goform/wifiSSIDset of the component POST Parameter Handler. Executing a manipulation of the argument index/GO can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.
Published: 2026-03-12T06:32:13.389Z
Updated: 2026-03-12T14:12:01.539Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4007 vulnerable 2026-06-08 08:05:12.486587 Tenda W3 POST Parameter wifiSSIDget stack-based overflow
HIGH (8.8)
A vulnerability was detected in Tenda W3 1.0.0.3(2204). This vulnerability affects unknown code of the file /goform/wifiSSIDget of the component POST Parameter Handler. Performing a manipulation of the argument index results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Published: 2026-03-12T06:32:09.542Z
Updated: 2026-03-12T14:23:03.456Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3976 vulnerable 2026-06-08 08:01:19.732835 Tenda W3 POST Parameter WifiMacFilterSet formWifiMacFilterSet stack-based overflow
HIGH (8.8)
A weakness has been identified in Tenda W3 1.0.0.3(2204). Impacted is the function formWifiMacFilterSet of the file /goform/WifiMacFilterSet of the component POST Parameter Handler. Executing a manipulation of the argument index/GO can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-03-12T02:32:13.620Z
Updated: 2026-03-12T14:42:16.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3975 vulnerable 2026-06-08 08:01:19.732445 Tenda W3 POST Parameter WifiMacFilterGet formWifiMacFilterGet stack-based overflow
HIGH (8.8)
A security flaw has been discovered in Tenda W3 1.0.0.3(2204). This issue affects the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet of the component POST Parameter Handler. Performing a manipulation of the argument wl_radio results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-03-12T02:32:09.842Z
Updated: 2026-03-12T14:44:15.372Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3974 vulnerable 2026-06-08 08:01:19.731934 Tenda W3 HTTP exeCommand formexeCommand stack-based overflow
HIGH (8.8)
A vulnerability was identified in Tenda W3 1.0.0.3(2204). This vulnerability affects the function formexeCommand of the file /goform/exeCommand of the component HTTP Handler. Such manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used.
Published: 2026-03-12T02:02:09.383Z
Updated: 2026-03-12T13:15:30.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3973 vulnerable 2026-06-08 08:01:19.731341 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3972 vulnerable 2026-06-08 08:01:19.729330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.