CVE-2017-9138

CVE-2017-9138 describes a debug-interface vulnerability affecting specific Tenda FH1202, F1202, and F1200 router versions prior to 1.2.0.20. An authenticated attacker on the local network can bypass access restrictions to execute shell commands directly, potentially altering router credentials. This vulnerability carries a high CVSS score of 8.0, indicating a significant risk. It requires local network access and authentication (AV:A, PR:L), but is low complexity (AC:L) and can lead to complete compromise of confidentiality, integrity, and availability (C:H, I:H, A:H). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. It is not listed on the CISA KEV catalog.