CVE-2022-45498: Tenda w6-S Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue in the component tpi_systool_handle(0) (/goform/SysToolReboot) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to arbitrarily reboot the device.

Affected products

• Tenda w6-S Firmware: version 1.0.0.4(510) only

Published 2022-12-08. Last modified 2026-06-17.