CVE-2013-3086

Cross-site request forgery CSRF vulnerability in utilsystem.html in Belkin N900 router allows remote attackers to hijack the authentication of administrators for requests that change configuration settings including passwords and remote management ports...

CVE-2013-3086

The CVE-2013-3086 entry concerns a CSRF vulnerability in the Belkin N900 router, specifically in the file/component util_system.html . The vulnerability allows an attacker to hijack the administrator’s authenticated session and perform config-changing requests (including changing passwords and re...

PT-2014-2656

Name of the Vulnerable Software and Affected Versions Belkin N900 router affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that change configuration settings, including password...

CVE-2013-3086: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in utilsystem.html in Belkin N900 router allows remote attackers to hijack the authentication of administrators for requests that change configuration settings including passwords and remote management ports...

CVE-2013-3087

Multiple cross-site scripting XSS vulnerabilities in Belkin N900 router allow remote attackers to inject arbitrary web script or HTML via the 1 ssid2 parameter to wlchannel.html or 2 guestpsk parameter to wlguest.html...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Belkin N900 router allow remote attackers to inject arbitrary web script or HTML via the 1 ssid2 parameter to wlchannel.html or 2 guestpsk parameter to wlguest.html...

CVE-2013-3087

Multiple cross-site scripting XSS vulnerabilities in Belkin N900 router allow remote attackers to inject arbitrary web script or HTML via the 1 ssid2 parameter to wlchannel.html or 2 guestpsk parameter to wlguest.html...

CVE-2013-3087

Belkin N900 router affected by CVE-2013-3087. Vulnerable components: XSS in web UI via (1) ssid2 parameter to wl_channel.html and (2) guest_psk parameter to wl_guest.html. Exploitation allows remote attackers to inject arbitrary web script/HTML in the browser of an authenticated user (no authenti...

PT-2014-2657

Name of the Vulnerable Software and Affected Versions Belkin N900 router affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the...

CVE-2013-3087: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Belkin N900 router allow remote attackers to inject arbitrary web script or HTML via the 1 ssid2 parameter to wlchannel.html or 2 guestpsk parameter to wlguest.html...

Update: Full Disclosure - WD My Net N600, N750, N900, N900C - Plain Text Disclosure of Admin Credentials

Vulnerable Systems: Western Digital My Net Series Wireless Routers: N600 Firmware 1.03.12 N600 Firmware 1.04.16 N750 Firmware 1.03.12 N750 Firmware 1.04.16 N900 Firmware 1.05.12 N900 Firmware 1.06.18 N900 Firmware 1.06.28 N900C Firmware 1.05.12 N900C Firmware 1.06.18 N900C Firmware 1.06.28 CVE...

Western Digital My Net Devices Information Disclosure Vulnerability

Western Digital My Net Router is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Western Digital My Net Wireless Routers - Password Disclosure

Vulnerable Systems: Western Digital My Net Series Wireless Routers: N600 Firmware 1.03.12 N600 Firmware 1.04.16 N750 Firmware 1.03.12 N750 Firmware 1.04.16 N900 Firmware 1.05.12 N900 Firmware 1.06.18 N900 Firmware 1.06.28 N900C Firmware 1.05.12 N900C Firmware 1.06.18 N900C Firmware 1.06.28 CVE...

CVE-2013-5006

maininternet.php on the Western Digital My Net N600 and N750 with firmware 1.03.12 and 1.04.16, and the N900 and N900C with firmware 1.05.12, 1.06.18, and 1.06.28, allows remote attackers to discover the cleartext administrative password by reading the "var pass=" line within the HTML source code...

CVE-2013-5006

The CVE-2013-5006 issue affects Western Digital My Net Series Wireless Routers (N600, N750, N900, N900C) across several firmwares (N600/N750: 1.03.12, 1.04.16; N900/N900C: 1.05.12, 1.06.18, 1.06.28). The vulnerability is an information disclosure in the web server: the admin password is stored in...

PT-2013-5328

Name of the Vulnerable Software and Affected Versions Western Digital My Net N600 versions 1.03.12 through 1.04.16 Western Digital My Net N750 versions 1.03.12 through 1.04.16 Western Digital My Net N900 versions 1.05.12 through 1.06.28 Western Digital My Net N900C versions 1.05.12 through 1.06.2...

CVE-2013-5006: Undefined Security Weakness

maininternet.php on the Western Digital My Net N600 and N750 with firmware 1.03.12 and 1.04.16, and the N900 and N900C with firmware 1.05.12, 1.06.18, and 1.06.28, allows remote attackers to discover the cleartext administrative password by reading the "var pass=" line within the HTML source code...

Belkin Wireless Router - Default WPS PIN Security

Belkin Wireless Router - Default WPS PIN Security source: https://www.securityfocus.com/bid/57128/info Belkin Wireless Router is prone to a security vulnerability that may allow attackers to generate a default WPS PIN. Successfully exploiting this issue may allow attackers to generate the default...

CVE-2012-6371

The WPA2 implementation on the Belkin N900 F9K1104v1 router establishes a WPS PIN based on 6 digits of the LAN/WLAN MAC address, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading broadcast packets, a different vulnerability than CVE-2012-4366...

CVE-2012-6371

The WPA2 implementation on the Belkin N900 F9K1104v1 router establishes a WPS PIN based on 6 digits of the LAN/WLAN MAC address, which makes it easier for remote attackers to obtain access to a Wi-Fi network by reading broadcast packets, a different vulnerability than CVE-2012-4366...