Tenda W6 Firmware 1.0.0.9(4122)

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:tenda:w6_firmware:1.0.0.9\(4122\):*:*:*:*:*:*:*

part: o version: 1.0.0.9(4122) update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductW6 Firmware (ff82967f-f026-5914-8945-8f76d24ee958)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-0995 vulnerable 2026-06-08 06:22:03.303916 Tenda W6 httpd wifiSSIDset formwrlSSIDset stack-based overflow
HIGH (7.2)
A vulnerability was found in Tenda W6 1.0.0.9(4122). It has been rated as critical. Affected by this issue is the function formwrlSSIDset of the file /goform/wifiSSIDset of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252260. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-29T02:00:08.977Z
Updated: 2025-06-02T19:12:09.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0994 vulnerable 2026-06-08 06:22:03.302660 Tenda W6 httpd setcfm formSetCfm stack-based overflow
HIGH (7.2)
A vulnerability was found in Tenda W6 1.0.0.9(4122). It has been declared as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm of the component httpd. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252259. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-29T01:31:05.266Z
Updated: 2024-11-12T21:48:39.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35561 vulnerable 2026-06-08 05:46:04.988110 Details available
A stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
Published: 2022-08-11T16:48:51.000Z
Updated: 2024-08-03T09:36:44.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35560 vulnerable 2026-06-08 05:46:04.987844 Details available
A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
Published: 2022-08-11T16:43:45.000Z
Updated: 2024-08-03T09:36:44.397Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35559 vulnerable 2026-06-08 05:46:04.987566 Details available
A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 parameters and ping2 parameters for a stack overflow attack. An attacker can use this vulnerability to execute arbitrary code execution.
Published: 2022-08-11T16:39:56.000Z
Updated: 2024-08-03T09:36:44.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35558 vulnerable 2026-06-08 05:46:04.987253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35557 vulnerable 2026-06-08 05:46:04.986790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35555 vulnerable 2026-06-08 05:46:04.985768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.