CVE-2022-35559: Tenda w6 Firmware

Critical severity, CVSS 9.8. EPSS: 12% chance of exploitation in the next 30 days.

A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 parameters and ping2 parameters for a stack overflow attack. An attacker can use this vulnerability to execute arbitrary code execution.

Affected products

• Tenda w6 Firmware: version 1.0.0.9(4122) only

Published 2022-08-12. Last modified 2026-06-17.