The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to (1) statusprocess.exe, (2) system_all.exe, or (3) restore.exe in cgi-bin/. NOTE: the setup_dns.exe vector is already covered by CVE-2008-1244.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2009-08-28 08:30
Updated : 2017-09-28 18:33
NVD link : CVE-2008-7115
Mitre link : CVE-2008-7115
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
belkin
- f5d7632-4
- wireless_g_router