High severity · published May 21, 2017
CVE-2017-9138
There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20)
8.0
CVSS
0.7%
EPSS
No
On KEV
Description
There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). After connecting locally to a router in a wired or wireless manner, one can bypass intended access restrictions by sending shell commands directly and reading their results, or by entering shell commands that change this router's username and password.
CVSS vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FF
F1200 Firmware · Tendacn
through 1.2.0.19 · source: NVD
FF
F1202 Firmware · Tendacn
through 1.2.0.19 · source: NVD
FF
Fh1202 Firmware · Tendacn
through 1.2.0.19 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-9138
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-9138
Vendor Advisory
http://www.tendacn.com/en/2017.html
More from F1200 Firmware
3.5
CVE-2017-9139
There is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20)