Cross-site request forgery (CSRF) vulnerability in util_system.html in Belkin N900 router allows remote attackers to hijack the authentication of administrators for requests that change configuration settings including passwords and remote management ports.
CVSS Vector
AV:N/AC:M/Au:N/C:P/I:P/A:PBelkin N900
HWBelkinall versionsBelkin N900 Firmware
OSBelkin1.00.23
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2013-3088CRITICAL9.8PL ✓same product
Obejście uwierzytelniania w routerze Belkin N900 przez debugowanie JavaScript
CVE-2013-4655HIGH7.5same product
Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service.
CVE-2013-3087MEDIUM4.3same product
Multiple cross-site scripting (XSS) vulnerabilities in Belkin N900 router allow remote attackers to inject arb...
CVE-2023-27217CRITICAL9.8PL ✓same vendor
Stack-based buffer overflow w Belkin Smart Outlet V2 F7C063 via UPnP
CVE-2022-30105CRITICAL9.8PL ✓same vendor
Belkin N300 Firmware — zdalne command injection z uprawnieniami root