CVE-2015-5988
CriticalSummary
The web management interface on Belkin F9K1102 devices with firmware 2.10.17 has a blank password, allowing remote attackers to gain administrative privileges by leveraging a LAN session.
Risk Assessment
The lack of a password in the management interface poses a serious security risk, enabling unauthorized users to access critical device functions.
Recommendation
It is recommended to immediately change the password settings to a strong one and update the firmware to the latest version.
Other vulnerabilities in Belkin F9K1102, firmware 2.10.17
See all- CVE-2015-5987High
Belkin F9K1102 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, making it easier for remote attackers to spoof responses by predicting this value.
- CVE-2015-5989Critical
Belkin F9K1102 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, allowing remote attackers to gain administrative privileges through certain changes to LockStatus and Login_Success values.
Original NVD description (English source)
The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtain administrative privileges by leveraging a LAN session.