CVE Catalog
CVE-2015-5989
CriticalSummary
Belkin F9K1102 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, allowing remote attackers to gain administrative privileges through certain changes to LockStatus and Login_Success values.
Risk Assessment
Attackers can remotely take control of the device, posing a serious threat to network security and user data.
Recommendation
It is recommended to update the firmware to the latest version and implement additional security measures to mitigate the risk of unauthorized access.
Original NVD description (English source)
Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remote attackers to obtain administrative privileges via certain changes to LockStatus and Login_Success values.