Belkin Wireless Routers Remote Authentication Bypass Vulnerability

Bugtraq ID:	15444
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 15 2005 12:00AM
Updated:	Nov 15 2005 12:00AM
Credit:	Andrei Mikhailovsky <[email protected]> discovered this vulnerability.
Vulnerable:	Belkin F5D7232-4 Belkin F5D7230-4
Not Vulnerable:

Belkin Wireless Routers Remote Authentication Bypass Vulnerability

Certain Belkin wireless routers are susceptible to a remote authentication bypass vulnerability. This issue is due to a flaw in the Web administration interface authentication process.

This issue allows remote attackers to gain administrative access to affected devices.

Belkin F5D7232-4, and F5D7230-4 routers with firmware versions 4.05.03 and 4.03.03 are affected by this issue. Other devices may also be affected due to code reuse among devices.

Belkin Wireless Routers Remote Authentication Bypass Vulnerability

An exploit is not required.

Belkin Wireless Routers Remote Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Belkin Wireless Routers Remote Authentication Bypass Vulnerability

References:

• F5D7230-4 Wireless G Router Product Page (Belkin)
  
• Authentication vulnerability in Belkin wireless devices (Andrei Mikhailovsky )
  
• Re: Authentication vulnerability in Belkin wireless devices (Andrei Mikhailovsky )