Multiple Belkin Wireless Routers Default WPA2 Password Security Vulnerability

Bugtraq ID:	56591
Class:	Design Error
CVE:	CVE-2012-4366
Remote:	Yes
Local:	No
Published:	Nov 19 2012 12:00AM
Updated:	Nov 19 2012 12:00AM
Credit:	Jakob Lell and Jörg Schneider
Vulnerable:
Not Vulnerable:

Multiple Belkin Wireless Routers Default WPA2 Password Security Vulnerability

Multiple Belkin Wireless Routers are prone to a security vulnerability that may allow attackers to generate a default WPA2 password.

Successfully exploiting this issue may allow attackers to generate the default WPA2 passwords. This may lead to other attacks.

The following products are affected:

Belkin Surf N150 F7D1301v1
Belkin N900 F9K1104v1
Belkin N450 F9K1105V2

Multiple Belkin Wireless Routers Default WPA2 Password Security Vulnerability

An attacker can use readily available network utilities to exploit this issue.

Multiple Belkin Wireless Routers Default WPA2 Password Security Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Belkin Wireless Routers Default WPA2 Password Security Vulnerability

References: