CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

172 matches found

Cvelist•added 2025/12/30 3:32 p.m.•37 views

CVE-2025-15254 Tenda W6-S ATE Service ate TendaAte os command injection

A vulnerability was found in Tenda W6-S 1.0.0.4510. This affects the function TendaAte of the file /goform/ate of the component ATE Service. Performing a manipulation results in os command injection. The attack may be initiated remotely. The exploit has been made public and could be used...

6.5CVSS0.0326EPSS

Exploits1References5

CVE•added 2025/12/30 3:32 p.m.•20 views

CVE-2025-15254

CVE-2025-15254 affects Tenda W6-S 1.0.0.4(510) ATE Service, specifically the TendaAte function in the /goform/ate file. The root cause is an input manipulation that enables an OS command injection. The vulnerability can be exploited remotely over the network, and the exploit has been publicly dis...

8.8CVSS6.3AI score0.0326EPSS

Exploits1References5Affected Software1

CNNVD•added 2025/12/30 12:0 a.m.•9 views

Tenda W6-S 操作系统命令注入漏洞

Tenda W6-S is a wireless access point device from Tenda China. An OS command injection vulnerability exists in Tenda W6-S version 1.0.0.4, which originates from an incorrect operation of the file /goform/ate in the component ATE Service, which could lead to os command injection...

8.8CVSS6.9AI score0.0326EPSS

Exploits1References5

CNNVD•added 2025/12/30 12:0 a.m.•5 views

Tenda W6-S 安全漏洞

Tenda W6-S is a wireless access point device from Tenda China. A security vulnerability exists in Tenda W6-S version 1.0.0.4, which originates from an incorrect manipulation of the file /bin/httpd parameter cookie in the component R7websSecurityHandler, which could result in a stack buffer overfl...

10CVSS7.6AI score0.03923EPSS

Exploits1References5

Positive Technologies•added 2025/12/30 12:0 a.m.•10 views

PT-2025-54180

A vulnerability was found in Tenda W6-S 1.0.0.4510. This affects the function TendaAte of the file /goform/ate of the component ATE Service. Performing manipulation results in os command injection. The attack may be initiated remotely. The exploit has been made public and could be used...

6.5CVSS7AI score0.0326EPSS

Exploits1References7

Positive Technologies•added 2025/12/29 12:0 a.m.•13 views

PT-2025-53720

Name of the Vulnerable Software and Affected Versions Tenda W6-S version 1.0.0.4510 Description A stack-based buffer overflow exists in the R7websSsecurityHandler component of Tenda W6-S. The issue is located in the file /bin/httpd. Manipulation of the Cookie argument can trigger the overflow. Th...

10CVSS9.8AI score0.03923EPSS

Exploits1References12