ID
VAR-202604-1262
CVE
CVE-2026-5567
TITLE
Shenzhen Tenda Technology Co.,Ltd. of m3 Multiple vulnerabilities in firmware
Trust: 0.8
DESCRIPTION
A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Executing a manipulation of the argument policyType can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used. An exploit has been exposed and may be used.All information handled by the software may be leaked to the outside. All information handled by the software may be rewritten. Furthermore, the software may stop working completely. Furthermore, attacks that exploit this vulnerability will not affect other software
Trust: 1.62
AFFECTED PRODUCTS
| vendor: | tenda | model: | m3 | scope: | eq | version: | 1.0.0.10 | Trust: 1.0 |
| vendor: | tenda | model: | m3 | scope: | eq | version: | m3 firmware 1.0.0.10 | Trust: 0.8 |
| vendor: | tenda | model: | m3 | scope: | - | version: | - | Trust: 0.8 |
| vendor: | tenda | model: | m3 | scope: | eq | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-120 | Trust: 1.0 |
| problemtype: | CWE-119 | Trust: 1.0 |
| problemtype: | Buffer error (CWE-119) [ others ] | Trust: 0.8 |
| problemtype: | Classic buffer overflow (CWE-120) [ others ] | Trust: 0.8 |
PATCH
| title: | //vuldb.com/vuln/355337 | url: | https://github.com/Moxxkidd/CVE/issues/2 | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2026-5567 | Trust: 2.6 |
| db: | JVNDB | id: | JVNDB-2026-013825 | Trust: 0.8 |
REFERENCES
| url: | https://www.tenda.com.cn/ | Trust: 1.8 |
| url: | https://vuldb.com/vuln/355337/cti | Trust: 1.0 |
| url: | https://github.com/moxxkidd/cve/issues/2 | Trust: 1.0 |
| url: | https://vuldb.com/submit/782999 | Trust: 1.0 |
| url: | https://vuldb.com/vuln/355337 | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2026-5567 | Trust: 0.8 |
SOURCES
| db: | JVNDB | id: | JVNDB-2026-013825 |
| db: | NVD | id: | CVE-2026-5567 |
LAST UPDATE DATE
2026-06-19T23:48:55.624000+00:00
SOURCES UPDATE DATE
| db: | JVNDB | id: | JVNDB-2026-013825 | date: | 2026-05-01T01:44:00 |
| db: | NVD | id: | CVE-2026-5567 | date: | 2026-04-30T13:40:56.990 |
SOURCES RELEASE DATE
| db: | JVNDB | id: | JVNDB-2026-013825 | date: | 2026-05-01T00:00:00 |
| db: | NVD | id: | CVE-2026-5567 | date: | 2026-04-05T13:17:14.707 |