← Database

CVE-2025-28220

HIGH CVSS: 7.5 Published: 2025-03-28 Modified: 2026-06-17

Description

Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request.

Affected Platforms

Tenda W6-STenda W6-S Firmware

Weakness Type

CWE-120

References