CVE-2015-5989
CriticalSummary
Belkin F9K1102 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, allowing remote attackers to gain administrative privileges through certain changes to LockStatus and Login_Success values.
Risk Assessment
Attackers can remotely take control of the device, posing a serious threat to network security and user data.
Recommendation
It is recommended to update the firmware to the latest version and implement additional security measures to mitigate the risk of unauthorized access.
Other vulnerabilities in Belkin F9K1102, firmware 2.10.17
See all- CVE-2015-5987High
Belkin F9K1102 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, making it easier for remote attackers to spoof responses by predicting this value.
- CVE-2015-5988Critical
The web management interface on Belkin F9K1102 devices with firmware 2.10.17 has a blank password, allowing remote attackers to gain administrative privileges by leveraging a LAN session.
Original NVD description (English source)
Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remote attackers to obtain administrative privileges via certain changes to LockStatus and Login_Success values.