返回 CVE 浏览器

CVE-2008-7115

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1430%

EPSS Percentile20.80th

Published2009年8月28日

Last Modified2026年4月23日

Vulnerability Description

The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to (1) statusprocess.exe, (2) system_all.exe, or (3) restore.exe in cgi-bin/. NOTE: the setup_dns.exe vector is already covered by CVE-2008-1244.

Affected Platforms (CPE)

🔌

Belkin

F5d7632 4

= 6.01.08

🔌

Belkin

Wireless G Router

All versions

References & Advisories

🔗 http://secunia.com/advisories/31665

🔗 http://www.securitytracker.com/id?1020747

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/44874

🔗 https://www.exploit-db.com/exploits/6305

🔗 http://secunia.com/advisories/31665

🔗 http://www.securitytracker.com/id?1020747

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/44874

🔗 https://www.exploit-db.com/exploits/6305

相关漏洞威胁

CVE-2008-124410.0

cgi-bin/setup_dns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote at...

CVE-2008-535310.0

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and...

CVE-2008-665110.0

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP c...

CVE-2008-535510.0

The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 1...