Vulnerabilities

TI-2025-13932 CVE-2025-15255 · GHSA-pw2q-c8xj-w9fw

Tenda W6-S R7websSsecurityHandler httpd stack-based overflow

HIGH 81

A vulnerability was determined in Tenda W6-S 1.0.0.4(510).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.04652 Published 2025-12-30 No fix listed CWE-119

TI-2025-13931 CVE-2025-15254 · GHSA-grrf-q8mm-c5x7

Tenda W6-S ATE Service ate TendaAte os command injection

MEDIUM 57

A vulnerability was found in Tenda W6-S 1.0.0.4(510).

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0373 Published 2025-12-30 No fix listed CWE-77

TI-2025-20750 CVE-2025-28221 · GHSA-rq3r-6rf7-m7m9

Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the set_local_time…

LOW 39

Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the set_local_time function, which allows remote attackers to cause web server crash via parameter time passed to the binary through a POST request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00485 Published 2025-03-28 No fix listed CWE-120

TI-2025-20749 CVE-2025-28220 · GHSA-fqg9-8xmx-9fgp

Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the setcfm function, which…

LOW 39

Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00485 Published 2025-03-28 No fix listed CWE-120

TI-2022-22453 CVE-2022-45504 · GHSA-62xx-9h8p-6hm3

An issue in the component tpi_systool_handle(0) (/goform/SysToolRestoreSet) of Tenda W6-S…

HIGH 72

An issue in the component tpi_systool_handle(0) (/goform/SysToolRestoreSet) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to arbitrarily reboot the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.1827 Published 2022-12-08 No fix listed CWE-306

TI-2022-22452 CVE-2022-45503 · GHSA-mv9x-w9q6-73gv

Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing.

HIGH 72

Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the linkEn parameter at /goform/setAutoPing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.009 Published 2022-12-08 No fix listed CWE-787

TI-2022-22451 CVE-2022-45501 · GHSA-8wcm-j236-xw84

Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/wifiSSIDset.

HIGH 72

Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/wifiSSIDset.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.009 Published 2022-12-08 No fix listed CWE-787

TI-2022-22450 CVE-2022-45499 · GHSA-wvc6-5mpx-7f77

Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio…

HIGH 72

Tenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at /goform/WifiMacFilterGet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.009 Published 2022-12-08 No fix listed CWE-787

TI-2022-22449 CVE-2022-45498 · GHSA-3rjw-7wv2-m7wv

An issue in the component tpi_systool_handle(0) (/goform/SysToolReboot) of Tenda W6-S…

HIGH 72

An issue in the component tpi_systool_handle(0) (/goform/SysToolReboot) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to arbitrarily reboot the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00873 Published 2022-12-08 No fix listed CWE-306

TI-2022-22448 CVE-2022-45497 · GHSA-pfw9-5vx2-rm8m

Tenda W6-S v1.0.0.4(510) was discovered to contain a command injection vulnerability in…

HIGH 82

Tenda W6-S v1.0.0.4(510) was discovered to contain a command injection vulnerability in the tpi_get_ping_output function at /goform/exeCommand.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0247 Published 2022-12-08 No fix listed CWE-78

Vulnerabilities

Filters