VulnCheck KEV: CVE-2008-1244

cgi-bin/setupdns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns11, dns12, dns13, and dns14 parameters. NOTE: it was later reported that...

Authentication flaw

cgi-bin/setupdns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns11, dns12, dns13, and dns14 parameters. NOTE: it was later reported that...

CVE-2008-1244

cgi-bin/setupdns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns11, dns12, dns13, and dns14 parameters. NOTE: it was later reported that...

CVE-2008-1244

cgi-bin/setupdns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns11, dns12, dns13, and dns14 parameters. NOTE: it was later reported that...

CVE-2008-1242

The CVE-2008-1242 issue affects Belkin F5D7230-4 router firmware 9.01.10, where authentication state is tracked by IP. The vulnerability allows a remote attacker to bypass login controls by initiating a session from an IP address that has already authenticated, effectively enabling access to the ...

CVE-2008-1242

The control panel on the Belkin F5D7230-4 router with firmware 9.01.10 maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user, a different vulnerability than...

CVE-2008-1245

Summary: CVE-2008-1245 affects Belkin Wireless G Router model F5D7230-4 (firmware 9.01.10). The vulnerability lies in the CGI script cgi-bin/setup_virtualserver.exe, which mishandles HTTP POST data when a request includes a "Connection: Keep-Alive" header, enabling remote attackers to trigger a d...

CVE-2008-1245: Improper Input Validation

cgi-bin/setupvirtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a denial of service control center outage via an HTTP request with invalid POST data and a "Connection: Keep-Alive" header...

CVE-2008-1244: Improper Authentication

cgi-bin/setupdns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to perform administrative actions, as demonstrated by changing a DNS server via the dns11, dns12, dns13, and dns14 parameters. NOTE: it was later reported that...

CVE-2008-1242: Undefined Security Weakness

The control panel on the Belkin F5D7230-4 router with firmware 9.01.10 maintains authentication state by IP address, which allows remote attackers to bypass authentication by establishing a session from a source IP address of a previously authenticated user, a different vulnerability than...

CVE-2007-6040

The CVE-2007-6040 entry concerns the Belkin F5D7230-4 Wireless G Router: a remote denial-of-service via a flood of TCP SYN packets, degrading networking and logging. The provided materials do not specify affected firmware versions, exact root cause details, exploit codes, or mitigations. Connecte...

CVE-2007-6040: Undefined Security Weakness

The Belkin F5D7230-4 Wireless G Router allows remote attackers to cause a denial of service degraded networking and logging via a flood of TCP SYN packets, a related issue to CVE-1999-0116...

CVE-2005-3802

CVE-2005-3802 affects Belkin F5D7232-4 and F5D7230-4 wireless routers with firmware 4.03.03 and 4.05.03. The issue arises in the web management interface: when a legitimate administrator is logged in, remote attackers can access the management interface without authentication. This is a direct by...

CVE-2005-3802: Undefined Security Weakness

Belkin F5D7232-4 and F5D7230-4 wireless routers with firmware 4.03.03 and 4.05.03, when a legitimate administrator is logged into the web management interface, allow remote attackers to access the management interface without authentication...