High severity7.5NVD Advisory· Published Mar 28, 2025· Updated Jun 17, 2026

CVE-2025-28220

Description

Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request.

Affected products

Tenda/W6-Scpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 1.0.0.4_510

Patches

Vulnerability mechanics

References

github.com/IdaJea/IOT_vuln_1/blob/master/w6_s_v1.0.0.4/setcfm.pdfnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000