HIGH🇵🇱 Wersja polska

CVE-2018-1146

CVSS 7.5v3.0pub. 2018-04-19upd. 2024-11-21

A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.cgi. When enabled the telnet session requires no password and provides root access.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
  • Belkin N750

    HW
    Belkin
    all versions
  • Belkin N750 Firmware

    OS
    Belkin
    1.10.22
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2013-7173CRITICAL9.8PL ✓same product

Buffer overflow w routerach Belkin N750

CVE-2018-1143CRITICAL9.8PL ✓same product

Command injection w Belkin N750 – zdalne wykonanie kodu jako root

CVE-2018-1144CRITICAL9.8PL ✓same product

Command Injection w Belkin N750 — zdalne wykonanie poleceń jako root

CVE-2018-1145CRITICAL9.8PL ✓same product

Buffer overflow w Belkin N750 — zdalny atak bez uwierzytelnienia przez proxy.cgi

CVE-2023-27217CRITICAL9.8PL ✓same vendor

Stack-based buffer overflow w Belkin Smart Outlet V2 F7C063 via UPnP