PatchTheCVEw6-s firmware vulnerabilities and fixes
Recent CVEs affecting w6-s firmware, with upgrade or downgrade steps. 4 tracked.
Also searched as: w6 s firmware, w6-sfirmware.
w6-s firmware has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-12-30. Highest priority: CVE-2025-15255 (score 70/100).
- CVE-2025-28221 HIGH 7.5 MITIGATE Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the set_local_time function, which allows remot
- CVE-2025-28220 HIGH 7.5 MITIGATE Tenda W6_S v1.0.0.4_510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attack
- CVE-2025-15255 CRITICAL 9.8 MITIGATE A vulnerability was determined in Tenda W6-S 1.0.0.4(510)
- CVE-2025-15254 MEDIUM 6.3 MITIGATE A vulnerability was found in Tenda W6-S 1.0.0.4(510)
FAQ
How do I fix w6-s firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is w6-s firmware being exploited right now?
None of the tracked w6-s firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which w6-s firmware CVE should I patch first?
CVE-2025-15255 currently ranks highest (70/100): A vulnerability was determined in Tenda W6-S 1.0.0.4(510).