CVE-2022-32036

7.5 highEPSS 1.2%

High (7.5) in tenda m3 firmware. EPSS 1.2% chance of exploitation in the next 30 days.

Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2022-07-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tenda:m3_firmware

References

https://github.com/d1tto/IoT-vuln/tree/main/Tenda/M3/formSetStoreWeb
https://github.com/d1tto/IoT-vuln/tree/main/Tenda/M3/formSetStoreWeb

Check your stack JSON