CVE-2022-30425: Tenda HG6 Firmware

High severity, CVSS 8.8. EPSS: 20% chance of exploitation in the next 30 days.

Tenda Technology Co.,Ltd HG6 3.3.0-210926 was discovered to contain a command injection vulnerability via the pingAddr and traceAddr parameters. This vulnerability is exploited via a crafted POST request.

Affected products

• Tenda HG6 Firmware: version 3.3.0-210926 only

Published 2022-06-02. Last modified 2026-06-17.