High severity7.5NVD Advisory· Published Mar 28, 2025· Updated Jun 17, 2026

CVE-2025-28221

Description

Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the set_local_time function, which allows remote attackers to cause web server crash via parameter time passed to the binary through a POST request.

Affected products

Tenda/W6-Scpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 1.0.0.4_510
Tenda/W6 S Firmware
cpe:2.3:o:tenda:w6-s_firmware:1.0.0.4\(510\):*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/IdaJea/IOT_vuln_1/blob/master/w6_s_v1.0.0.4/time.pdfnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000