Belkin N150 Wireless Router 'login.stm' Administrator Password Information Disclosure Vulnerability

Bugtraq ID:	53502
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 14 2012 12:00AM
Updated:	May 14 2012 12:00AM
Credit:	Avinash Tangirala
Vulnerable:	Belkin N150 Wireless Router 1.0.22
Not Vulnerable:

Belkin N150 Wireless Router 'login.stm' Administrator Password Information Disclosure Vulnerability

Belkin N150 Wireless Router is prone to a password information-disclosure vulnerability.

Attackers can exploit this issue to gain access to the administrator's password. Successfully exploiting this issue may lead to other attacks.

Belkin N150 Wireless Router firmware version 1.00.22 is vulnerable; other versions may also be affected.

Belkin N150 Wireless Router 'login.stm' Administrator Password Information Disclosure Vulnerability

Attackers can exploit this issue using a browser.

The following exploit code is available.

• /data/vulnerabilities/exploits/53502.pl

Belkin N150 Wireless Router 'login.stm' Administrator Password Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any recent information, please mail us at: [email protected].

Belkin N150 Wireless Router 'login.stm' Administrator Password Information Disclosure Vulnerability

References:

• Belkin Homepage (Belkin)