critical10.0Public exploit code
CVE-2008-7115
The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Belkin Wireless G Router / ADSL2 Modem - Authentication Bypass2008-08-25 · remote · hardware · Verified
Impact
The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to (1) statusprocess.exe, (2) system_all.exe, or (3) restore.exe in cgi-bin/. NOTE: the setup_dns.exe vector is already covered by CVE-2008-1244.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Belkin | F5d7632-4 | Version 6.01.08 |
| Belkin | Wireless G Router | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/31665
- http://www.securitytracker.com/id?1020747
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44874
- https://www.exploit-db.com/exploits/6305
- http://secunia.com/advisories/31665
- http://www.securitytracker.com/id?1020747
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44874
- https://www.exploit-db.com/exploits/6305