Tenda w6 Firmware vulnerabilities

8 CVEs affecting Tenda w6 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-0995, published 2024-01-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-35555, published 2022-08-12. Critical severity, CVSS 9.8. EPSS: 26.3% chance of exploitation in the next 30 days. A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput parameters for arbitrary command execution.
CVE-2022-35559, published 2022-08-12. Critical severity, CVSS 9.8. EPSS: 12% chance of exploitation in the next 30 days. A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 parameters and ping2 parameters for a stack overflow attack. An…
CVE-2024-0995, published 2024-01-29. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability was found in Tenda W6 1.0.0.9(4122). It has been rated as critical. Affected by this issue is the function formwrlSSIDset of the file /goform/wifiSSIDset of the component httpd. The…
CVE-2024-0994, published 2024-01-29. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability was found in Tenda W6 1.0.0.9(4122). It has been declared as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm of the component httpd. The…
CVE-2022-35561, published 2022-08-12. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
CVE-2022-35560, published 2022-08-12. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
CVE-2022-35558, published 2022-08-12. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.
CVE-2022-35557, published 2022-08-12. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denial of service (DoS) via the index parameter.