VYPR
← All advisories
High severity7.5NVD Advisory· Published Mar 28, 2025· Updated Jun 17, 2026

CVE-2025-28220

CVE-2025-28220

Description

Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request.

Affected products

3
  • Tenda/W6-Scpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 1.0.0.4_510
  • Tenda/W6 S Firmware
    cpe:2.3:o:tenda:w6-s_firmware:1.0.0.4\(510\):*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.