CVE-2017-9138

There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20)

published May 21, 2017

CVSS
—
EPSS
1%
Percentile
51.9
In the wild
Unconfirmed
What it is

There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). After connecting locally to a router in a wired or wireless manner, one can bypass intended access restrictions by sending shell commands directly and reading their results, or by entering shell commands that change this router's username and password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00688 · 51.9th percentile
Published
2017-05-21T22:00Z
EPSS history
Timeline
  • 21 MAY 22:00Z
    There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20)
    cvelistv5