VULNERABILITY INTELLIGENCE

CVE-2017-9138

CVSS score8 HIGH
EPSS probability0.69%
CISA KEVNot currently listed
Published2017-05-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). After connecting locally to a router in a wired or wireless manner, one can bypass intended access restrictions by sending shell commands directly and reading their results, or by entering shell commands that change this router's username and password.

Weakness classification

  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references