PT-2017-18720 · Tenda · Tenda Routers

Publicado 2017-05-21 · Atualizado 2017-06-02 · CVE-2017-9138

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenda routers (FH1202/F1202/F1200) versions prior to 1.2.0.20

Description The issue allows an attacker to bypass intended access restrictions on the router. After establishing a local connection, either wired or wireless, an attacker can send shell commands directly to the router and read their results. Additionally, an attacker can enter shell commands to change the router's username and password.

Recommendations For versions prior to 1.2.0.20, update to version 1.2.0.20 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-9138

Produtos afetados

Tenda Routers

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-9138 · Nota de Segurança
• http://tendacn.com/en/2017.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-9138 · Aviso do Fabricante