medium5.5Public exploit code
CVE-2008-0403
The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and m…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Belkin F5D9230-4 Wireless G Plus MIMO Router - Authentication Bypass2008-01-20 · remote · hardware · Verified
Impact
The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and modify configuration via a direct request to SaveCfgFile.cgi.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Belkin | F5d9230-4 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/28554
- http://securityreason.com/securityalert/3566
- http://www.securityfocus.com/archive/1/486748/100/0/threaded
- http://www.securityfocus.com/bid/27359
- http://www.vupen.com/english/advisories/2008/0215
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39793
- https://www.exploit-db.com/exploits/4941
- http://secunia.com/advisories/28554
- http://securityreason.com/securityalert/3566
- http://www.securityfocus.com/archive/1/486748/100/0/threaded
- http://www.securityfocus.com/bid/27359
- http://www.vupen.com/english/advisories/2008/0215
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39793
- https://www.exploit-db.com/exploits/4941