m3_firmware vulnerabilities
CVEs whose affected-version data names the m3_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
CVE-2026-5567High· 8.8A flaw has been found in Tenda M3 1.0.0.10
A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Executing a manipulation of the argument policyType can lead …
CVE-2025-15234High· 8.8A weakness has been identified in Tenda M3 1.0.0.13(4903)
A weakness has been identified in Tenda M3 1.0.0.13(4903). Impacted is the function formSetRemoteInternetLanInfo of the file /goform/setInternetLanInfo. This manipulation of the argument portIp/portMask/portGateWay/portDns/portSecDns cau…
CVE-2025-15233High· 8.8A security flaw has been discovered in Tenda M3 1.0.0.13(4903)
A security flaw has been discovered in Tenda M3 1.0.0.13(4903). This issue affects the function formSetAdInfoDetails of the file /goform/setAdInfoDetail. The manipulation of the argument adName/smsPassword/smsAccount/weixinAccount/weixin…
CVE-2025-15232High· 8.8A vulnerability was identified in Tenda M3 1.0.0.13(4903)
A vulnerability was identified in Tenda M3 1.0.0.13(4903). This vulnerability affects the function formSetAdPushInfo of the file /goform/setAdPushInfo. The manipulation of the argument mac/terminal leads to stack-based buffer overflow. T…
CVE-2025-15231High· 8.8A vulnerability was determined in Tenda M3 1.0.0.13(4903)
A vulnerability was determined in Tenda M3 1.0.0.13(4903). This affects the function formSetRemoteVlanInfo of the file /goform/setVlanInfo. Executing a manipulation of the argument ID/vlan/port can lead to stack-based buffer overflow. Th…
CVE-2025-15230High· 8.8A vulnerability was found in Tenda M3 1.0.0.13(4903)
A vulnerability was found in Tenda M3 1.0.0.13(4903). Affected by this issue is the function formSetVlanPolicy of the file /goform/setVlanPolicyData. Performing a manipulation of the argument qvlan_truck_port results in heap-based buffer…