← Vulnerability feed

Vulnerability record · CVE-2024-0995 · published 29 January 2024

CVE-2024-0995: Tenda w6 firmware stack-based buffer overflow vulnerability

Tenda · W6 Firmware

A vulnerability was found in Tenda W6 1.0.0.9(4122). It has been rated as critical. Affected by this issue is the function formwrlSSIDset of the file /goform/wifiSSIDset of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252260. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

9.8 CVSS 3.1 Critical EPSS 1.7% · top 24.3% CWE-121 · Stack-based buffer overflowCWE-787 · Out-of-bounds write
9.8CVSS 3.1 base score, v2 8.3
1.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

A vulnerability was found in Tenda W6 1.0.0.9(4122). It has been rated as critical. Affected by this issue is the function formwrlSSIDset of the file /goform/wifiSSIDset of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-252260. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://jylsec.notion.site/Tenda-w6-has-stack-buffer-overflow-vulnerability-in-formwrlSSIDset-e283b41905934e97b4c65632a0 ExploitPermissions RequiredThird Party Advisory
https://vuldb.com/?ctiid.252260 Permissions RequiredThird Party AdvisoryVDB Entry
https://vuldb.com/?id.252260 Permissions RequiredThird Party AdvisoryVDB Entry
https://jylsec.notion.site/Tenda-w6-has-stack-buffer-overflow-vulnerability-in-formwrlSSIDset-e283b41905934e97b4c65632a0 ExploitPermissions RequiredThird Party Advisory
https://vuldb.com/?ctiid.252260 Permissions RequiredThird Party AdvisoryVDB Entry
https://vuldb.com/?id.252260 Permissions RequiredThird Party AdvisoryVDB Entry

Track CVE-2024-0995 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-0994Tenda w6 firmware stack-based buffer overflow vulnerabilityA vulnerability was found in Tenda W6 1.0.0.9(4122). It has been declared as critical. Affected by this vulnerability is the function formSetCfm of t…EPSS 1.7%9.8CVE-2022-35555Tenda w6 firmware os command injection vulnerabilityA command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput parameters fo…EPSS 26%9.8CVE-2022-35559Tenda w6 firmware out-of-bounds write vulnerabilityA stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 parameters and p…EPSS 11%7.5CVE-2022-35557Tenda w6 firmware out-of-bounds write vulnerabilityA stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denia…EPSS 1.0%7.5CVE-2022-35558Tenda w6 firmware out-of-bounds write vulnerabilityA stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a …EPSS 1.0%7.5CVE-2022-35560Tenda w6 firmware out-of-bounds write vulnerabilityA stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a denia…EPSS 1.0%7.5CVE-2022-35561Tenda w6 firmware out-of-bounds write vulnerabilityA stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to cause a …EPSS 1.0%8.8CVE-2026-7273Zyxel gs1900-8 firmware stack-based buffer overflow vulnerabilityA stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-base…KEVEPSS 2.5%

Source: NIST National Vulnerability Database (record CVE-2024-0995), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.