CVE-2017-9138

Name of the Vulnerable Software and Affected Versions Tenda routers (FH1202/F1202/F1200) versions prior to 1.2.0.20

Description The issue allows an attacker to bypass intended access restrictions on the router. After establishing a local connection, either wired or wireless, an attacker can send shell commands directly to the router and read their results. Additionally, an attacker can enter shell commands to change the router's username and password.

Recommendations For versions prior to 1.2.0.20, update to version 1.2.0.20 or later to resolve the issue.