vulnwire
3.5low

CVE-2017-9139

There is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20).

Published 9 y ago · modified 4 mo ago · JSON

CVSS
3.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 31%
Public exploits
0
none known

There is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). Crafted POST requests to an unspecified URL result in DoS, interrupting the HTTP service (used to login to the web UI of a router) for 1 to 2 seconds.

Exploit prediction (EPSS)

0.37% probability of exploitation in the next 30 days, higher than 31% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.03.5CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
NVD2.02.7AV:A/AC:L/Au:S/C:N/I:N/A:P

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

  • tendacn.com /en/2017.html · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.