CVEvulnerability

CVE-2017-9138

8.0 HIGH Published 2017-05-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-05-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.0 HIGH — CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.7 HIGH — AV:A/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-119

Description

There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). After connecting locally to a router in a wired or wireless manner, one can bypass intended access restrictions by sending shell commands directly and reading their results, or by entering shell commands that change this router's username and password.

Affected configurations

• tendacn f1200 firmware (<= 1.2.0.19) • tendacn fh1202 firmware (<= 1.2.0.19) • tendacn f1202 firmware (<= 1.2.0.19)

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References