Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-9138

Опубликовано: 21 мая 2017
Источник: nvd
CVSS3: 8
CVSS2: 7.7
EPSS Низкий

Описание

There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). After connecting locally to a router in a wired or wireless manner, one can bypass intended access restrictions by sending shell commands directly and reading their results, or by entering shell commands that change this router's username and password.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tendacn:f1200_firmware:*:*:*:*:*:*:*:*
Версия до 1.2.0.19 (включая)
cpe:2.3:h:tendacn:f1200:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:tendacn:fh1202_firmware:*:*:*:*:*:*:*:*
Версия до 1.2.0.19 (включая)
cpe:2.3:h:tendacn:fh1202:-:*:*:*:*:*:*:*
Конфигурация 3

Одновременно

cpe:2.3:o:tendacn:f1202_firmware:*:*:*:*:*:*:*:*
Версия до 1.2.0.19 (включая)
cpe:2.3:h:tendacn:f1202:-:*:*:*:*:*:*:*

EPSS

Процентиль: 34%
0.00135
Низкий

8 High

CVSS3

7.7 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 8
github
больше 3 лет назад

There is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). After connecting locally to a router in a wired or wireless manner, one can bypass intended access restrictions by sending shell commands directly and reading their results, or by entering shell commands that change this router's username and password.

EPSS

Процентиль: 34%
0.00135
Низкий

8 High

CVSS3

7.7 High

CVSS2

Дефекты

CWE-119