Belkin F5D5230-4 4-Port Cable/DSL Gateway Router 1.20.000 modifies the source IP address of internal packets to that of the router's external interface when forwarding a request from an internal host to an internal web server, which allows remote attackers to hide which host is being used to access the web server.
Max CVSS
7.5
EPSS Score
1.01%
Published
2003-04-11
Updated
2008-09-05
Belkin F5D6130 Wireless Network Access Point running firmware AP14G8 allows remote attackers to cause a denial of service (connection loss) by sending several SNMP GetNextRequest requests.
Max CVSS
5.0
EPSS Score
4.33%
Published
2002-12-31
Updated
2008-09-05
Belkin 54G (F5D7130) wireless router allows remote attackers to access restricted resources by sniffing URIs from UPNP datagrams, then accessing those URIs, which do not require authentication.
Max CVSS
7.5
EPSS Score
0.33%
Published
2005-05-02
Updated
2008-09-05
The SNMP service in the Belkin 54G (F5D7130) wireless router allows remote attackers to cause a denial of service via unknown vectors.
Max CVSS
5.0
EPSS Score
0.17%
Published
2005-05-02
Updated
2008-09-05
Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the (1) Telnet or (2) web administration interfaces.
Max CVSS
7.5
EPSS Score
1.15%
Published
2005-07-26
Updated
2017-07-12
Belkin F5D7232-4 and F5D7230-4 wireless routers with firmware 4.03.03 and 4.05.03, when a legitimate administrator is logged into the web management interface, allow remote attackers to access the management interface without authentication.
Max CVSS
5.1
EPSS Score
2.23%
Published
2005-11-24
Updated
2017-07-12
The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetooth Software 1.4.2 Build 10 and ANYCOM Blue USB-130-250 Software 4.0.1.1500, and possibly other devices, sets null Authentication and Authorization values, which allows remote attackers to send arbitrary audio and possibly eavesdrop using the microphone via the Hands Free Audio Gateway and Headset profile.
Max CVSS
6.4
EPSS Score
3.71%
Published
2005-12-20
Updated
2018-10-19
Cross-site scripting (XSS) vulnerability in the Belkin G Plus Router F5D7231-4 with firmware 4.05.03 allows remote attackers to inject arbitrary web script or HTML via a hostname of a DHCP client.
Max CVSS
4.3
EPSS Score
0.30%
Published
2007-07-15
Updated
2017-07-29
The Belkin F5D7230-4 Wireless G Router allows remote attackers to cause a denial of service (degraded networking and logging) via a flood of TCP SYN packets, a related issue to CVE-1999-0116.
Max CVSS
5.0
EPSS Score
0.92%
Published
2007-11-20
Updated
2018-10-15
The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and modify configuration via a direct request to SaveCfgFile.cgi.
Max CVSS
5.5
EPSS Score
0.98%
Published
2008-01-23
Updated
2018-10-15
The control panel on the Belkin F5D7230-4 router with firmware 9.01.10 maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user, a different vulnerability than CVE-2005-3802.
Max CVSS
10.0
EPSS Score
0.83%
Published
2008-03-10
Updated
2018-10-11
cgi-bin/setup_dns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns1_1, dns1_2, dns1_3, and dns1_4 parameters. NOTE: it was later reported that F5D7632-4V6 with firmware 6.01.08 is also affected.
Max CVSS
10.0
EPSS Score
1.95%
Published
2008-03-10
Updated
2018-10-11
cgi-bin/setup_virtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a denial of service (control center outage) via an HTTP request with invalid POST data and a "Connection: Keep-Alive" header.
Max CVSS
7.8
EPSS Score
1.30%
Published
2008-03-10
Updated
2018-10-11
The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to (1) statusprocess.exe, (2) system_all.exe, or (3) restore.exe in cgi-bin/. NOTE: the setup_dns.exe vector is already covered by CVE-2008-1244.
Max CVSS
10.0
EPSS Score
0.52%
Published
2009-08-28
Updated
2017-09-29
Belkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, and N300 Model F7D2301v1 generate a predictable default WPA2-PSK passphrase based on eight digits of the WAN MAC address, which allows remote attackers to access the network by sniffing the beacon frames.
Max CVSS
3.3
EPSS Score
3.09%
Published
2012-11-20
Updated
2017-08-29
The WPA2 implementation on the Belkin N900 F9K1104v1 router establishes a WPS PIN based on 6 digits of the LAN/WLAN MAC address, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading broadcast packets, a different vulnerability than CVE-2012-4366.
Max CVSS
3.3
EPSS Score
0.11%
Published
2012-12-31
Updated
2013-01-02
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Linksys E4200 router with firmware 1.0.05 build 7 allow remote attackers to inject arbitrary web script or HTML via the (1) log_type, (2) ping_ip, (3) ping_size, (4) submit_type, or (5) traceroute_ip parameter to apply.cgi or (6) new_workgroup or (7) submit_button parameter to storage/apply.cgi.
Max CVSS
6.1
EPSS Score
1.12%
Published
2020-02-18
Updated
2020-02-27
Belkin Wemo Switch before WeMo_US_2.00.2176.PVT could allow remote attackers to upload arbitrary files onto the system.
Max CVSS
9.8
EPSS Score
14.36%
Published
2020-01-28
Updated
2020-02-05
Cross-site request forgery (CSRF) vulnerability in cgi-bin/system_setting.exe in Belkin F5D8236-4 v2 allows remote attackers to hijack the authentication of administrators for requests that open the remote management interface on arbitrary ports via the remote_mgmt_enabled and remote_mgmt_port parameters.
Max CVSS
6.8
EPSS Score
0.42%
Published
2014-09-29
Updated
2014-10-01
Multiple cross-site scripting (XSS) vulnerabilities in Belkin Model F5D8236-4 v2 router allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Max CVSS
4.3
EPSS Score
0.15%
Published
2014-01-30
Updated
2017-08-29
An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2.
Max CVSS
9.8
EPSS Score
0.66%
Published
2019-12-26
Updated
2020-01-09
Cross-site request forgery (CSRF) vulnerability in util_system.html in Belkin N900 router allows remote attackers to hijack the authentication of administrators for requests that change configuration settings including passwords and remote management ports.
Max CVSS
6.8
EPSS Score
0.29%
Published
2014-09-29
Updated
2014-10-01
Multiple cross-site scripting (XSS) vulnerabilities in Belkin N900 router allow remote attackers to inject arbitrary web script or HTML via the (1) ssid2 parameter to wl_channel.html or (2) guest_psk parameter to wl_guest.html.
Max CVSS
4.3
EPSS Score
0.18%
Published
2014-01-30
Updated
2017-08-29
Belkin N900 router (F9K1104v1) contains an Authentication Bypass using "Javascript debugging".
Max CVSS
9.8
EPSS Score
0.33%
Published
2019-12-26
Updated
2020-01-16
Cross-site request forgery (CSRF) vulnerability in apply.cgi in Belkin N300 (F7D7301v1) router allows remote attackers to hijack the authentication of administrators for requests that modify configuration.
Max CVSS
6.8
EPSS Score
0.29%
Published
2014-09-29
Updated
2014-10-01
51 vulnerabilities found
1 2 3
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!