CVE-2017-9138

8.0 highEPSS 0.7%

There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). After connecting locally to a router in a wired or wireless manner, one can bypass intended access restrictions by sending shell commands directly and reading their results, or by entering shell commands that change this router's username and password.

Severity

CVSS 3.0

8.0 high

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2017-05-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tendacn:f1200_firmware
tendacn:f1202_firmware
tendacn:fh1202_firmware

References

http://www.tendacn.com/en/2017.html
http://www.tendacn.com/en/2017.html

Check your stack JSON