CVE-2017-9138

There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). After connecting locally to a router in a wired or wireless manner, one can bypass intended access restrictions by sending shell commands directly and reading their results, or by entering shell commands that change this router's username and password.

Score

CVSS 3.0 8.0 High

Status

Modified - cve@mitre.org

Published

2017-05-21

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• F1200 Firmware (Tendacn)
• F1202 Firmware (Tendacn)
• Fh1202 Firmware (Tendacn)

References

• http://www.tendacn.com/en/2017.html