CVE-2014-2962

The Belkin N150 router (F9K1009, v1) contains a path traversal flaw in the webproc CGI module. The getpage parameter accepts an unrestricted file path, and the web server runs with root privileges, enabling an unauthenticated attacker on the LAN to read arbitrary files. Affected firmwares are bef...