CVE-2025-28220: Tenda w6-S Firmware

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request.

Affected products

• Tenda w6-S Firmware: version 1.0.0.4(510) only

Published 2025-03-28. Last modified 2026-06-17.