Is CVE-2017-9139 actively exploited?

No active exploitation of CVE-2017-9139 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2017-9139 be exploited remotely?

Partially. CVE-2017-9139 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2017-9139?

CVE-2017-9139 has a CVSS score of 3.5 (LOW).

HOME VULNERABILITIESCVE-2017-9139

LOW

CVE-2017-9139

CWE-119Published: May 21, 2017· Updated: Jun 17, 2026

3.5

CVSS v3.1

Official Description

There is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20). Crafted POST requests to an unspecified URL result in DoS, interrupting the HTTP service (used to login to the web UI of a router) for 1 to 2 seconds.

NVD Source

Technical Analysis

CVE-2017-9139 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

From a weakness classification perspective (CWE-119): Buffer overflow vulnerabilities can lead to arbitrary code execution or denial of service by corrupting adjacent memory.