PT-2017-18721
CVE-2017-9139
·
Published
2017-05-21
·
Updated
2017-06-02
Description by
CVSS 3.1
3.5
LowMetricsAV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Tenda routers (FH1202/F1202/F1200) versions prior to 1.2.0.20
Description
The issue is a stack-based buffer overflow. It can be triggered by crafted POST requests to an unspecified URL, resulting in a Denial of Service (DoS) that interrupts the HTTP service used for logging into the router's web UI. The interruption lasts for 1 to 2 seconds.
Recommendations
For versions prior to 1.2.0.20, update to version 1.2.0.20 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾