Tenda W6-s Firmware 1.0.0.4(510)
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:w6-s_firmware:1.0.0.4\(510\):*:*:*:*:*:*:*
part: o version: 1.0.0.4(510) update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | W6 S Firmware (3ff12b9b-8adc-5059-a6d0-282df5c1e821) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-28221 |
vulnerable | 2026-06-08 07:14:56.049057 |
Details available
Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the set_local_time function, which allows remote attackers to cause web server crash via parameter time passed to the binary through a POST request.
Published: 2025-03-28T00:00:00.000Z
Updated: 2025-04-21T18:58:32.598Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-28220 |
vulnerable | 2026-06-08 07:14:56.047790 |
Details available
Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request.
Published: 2025-03-28T00:00:00.000Z
Updated: 2025-04-21T18:57:33.860Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15255 |
vulnerable | 2026-06-08 07:06:35.947641 |
Tenda W6-S R7websSsecurityHandler httpd stack-based overflow
CRITICAL (9.8)
A vulnerability was determined in Tenda W6-S 1.0.0.4(510). This impacts an unknown function of the file /bin/httpd of the component R7websSsecurityHandler. Executing a manipulation of the argument Cookie can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-12-30T16:02:07.019Z
Updated: 2026-02-24T06:17:51.072Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15254 |
vulnerable | 2026-06-08 07:06:35.945814 |
Tenda W6-S ATE Service ate TendaAte os command injection
MEDIUM (6.3)
A vulnerability was found in Tenda W6-S 1.0.0.4(510). This affects the function TendaAte of the file /goform/ate of the component ATE Service. Performing a manipulation results in os command injection. The attack may be initiated remotely. The exploit has been made public and could be used.
Published: 2025-12-30T15:32:07.822Z
Updated: 2026-02-24T06:17:32.716Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45504 |
vulnerable | 2026-06-08 05:50:36.463523 |
Details available
An issue in the component tpi_systool_handle(0) (/goform/SysToolRestoreSet) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to arbitrarily reboot the device.
Published: 2022-12-08T00:00:00.000Z
Updated: 2025-04-23T15:00:53.519Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45503 |
vulnerable | 2026-06-08 05:50:36.462785 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45501 |
vulnerable | 2026-06-08 05:50:36.462225 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45499 |
vulnerable | 2026-06-08 05:50:36.461728 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45498 |
vulnerable | 2026-06-08 05:50:36.461122 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45497 |
vulnerable | 2026-06-08 05:50:36.459751 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.