CVE-2017-9139

There is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). Crafted POST requests to an unspecified URL result in DoS, interrupting the HTTP service (used to login to the web UI of a router) for 1 to 2 seconds.

Score

CVSS 3.0 3.5 Low

Status

Modified - cve@mitre.org

Published

2017-05-21

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• F1200 Firmware (Tendacn)
• F1202 Firmware (Tendacn)
• Fh1202 Firmware (Tendacn)

References

• http://www.tendacn.com/en/2017.html