VulnCheck KEV: CVE-2008-1244

cgi-bin/setupdns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns11, dns12, dns13, and dns14 parameters. NOTE: it was later reported...

CVE-2008-1244

cgi-bin/setupdns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns11, dns12, dns13, and dns14 parameters. NOTE: it was later reported that...

Authentication flaw

cgi-bin/setupdns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns11, dns12, dns13, and dns14 parameters. NOTE: it was later reported that...

CVE-2008-1242

The control panel on the Belkin F5D7230-4 router with firmware 9.01.10 maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user, a different vulnerability than...

CVE-2008-1244

cgi-bin/setupdns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns11, dns12, dns13, and dns14 parameters. NOTE: it was later reported that...

CVE-2008-1242

The CVE-2008-1242 issue affects Belkin F5D7230-4 router firmware 9.01.10, where authentication state is tracked by IP. The vulnerability allows a remote attacker to bypass login controls by initiating a session from an IP address that has already authenticated, effectively enabling access to the ...

CVE-2008-1245

Summary: CVE-2008-1245 affects Belkin Wireless G Router model F5D7230-4 (firmware 9.01.10). The vulnerability lies in the CGI script cgi-bin/setup_virtualserver.exe, which mishandles HTTP POST data when a request includes a "Connection: Keep-Alive" header, enabling remote attackers to trigger a d...

CVE-2007-6040

The CVE-2007-6040 entry concerns the Belkin F5D7230-4 Wireless G Router: a remote denial-of-service via a flood of TCP SYN packets, degrading networking and logging. The provided materials do not specify affected firmware versions, exact root cause details, exploit codes, or mitigations. Connecte...

CVE-2005-3802

CVE-2005-3802 affects Belkin F5D7232-4 and F5D7230-4 wireless routers with firmware 4.03.03 and 4.05.03. The issue arises in the web management interface: when a legitimate administrator is logged in, remote attackers can access the management interface without authentication. This is a direct by...