EUVD-2015-5933

Malware in sbrugna...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Belkin F9K1102 2 devices with firmware 2.10.17 allows remote attackers to hijack the authentication of arbitrary users...

Session fixation

The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...

CVE-2015-5990

Cross-site request forgery CSRF vulnerability on Belkin F9K1102 2 devices with firmware 2.10.17 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-5990

Belkin N600 DB Wireless Dual Band N+ router (model F9K1102 v2) with firmware 2.10.17 is vulnerable to a CSRF flaw (CVE-2015-5990) that can allow an attacker to hijack the user’s authenticated session. The CERT/CC entry attributes multiple issues to this device family, with CVE-2015-5990 specifica...