Belkin F9K1102 2.10.17 LockStatus/Login_Success access control

A vulnerability was found in Belkin F9K1102 2.10.17. It has been classified as critical. Affected is an unknown functionality. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

136
020

Field

source_cve_assigned1
vulnerability_cvss3_nvd_basescore1
vulnerability_cvss3_vuldb_a1
vulnerability_cvss3_vuldb_i1
vulnerability_cvss3_vuldb_c1

Commit Conf

100%36
90%9
60%7
72%4

Approve Conf

100%36
90%9
60%7
72%4
IDCommitedUserFieldChangeRemarksAcceptedReasonC
532159605/25/2018VulD...cve_assigned1439510400 (08/14/2015)cve.org05/25/2018accepted
100
532161501/02/2016VulD...cvss3_nvd_basescore9.8nist.gov01/02/2016accepted
90
532161401/02/2016VulD...cvss3_vuldb_aLsee CVSS documentation01/02/2016accepted
60
532161301/02/2016VulD...cvss3_vuldb_iLsee CVSS documentation01/02/2016accepted
60
532161201/02/2016VulD...cvss3_vuldb_cLsee CVSS documentation01/02/2016accepted
60
532161101/02/2016VulD...cvss3_vuldb_sUsee CVSS documentation01/02/2016accepted
60
532161001/02/2016VulD...cvss3_vuldb_prNsee CVSS documentation01/02/2016accepted
60
532160901/02/2016VulD...cvss3_vuldb_acLsee CVSS documentation01/02/2016accepted
60
532160801/02/2016VulD...cvss3_vuldb_avNsee CVSS documentation01/02/2016accepted
60
532160701/02/2016VulD...cvss3_vuldb_rcXsee CVSS documentation01/02/2016accepted
90
532160601/02/2016VulD...cvss3_vuldb_rlXsee CVSS documentation01/02/2016accepted
90
532160501/02/2016VulD...cvss3_vuldb_eXsee CVSS documentation01/02/2016accepted
90
532160401/02/2016VulD...cvss2_vuldb_rcNDsee CVSS documentation01/02/2016accepted
90
532160301/02/2016VulD...cvss2_vuldb_rlNDsee CVSS documentation01/02/2016accepted
90
532160201/02/2016VulD...cvss2_vuldb_eNDsee CVSS documentation01/02/2016accepted
90
532160101/02/2016VulD...locationWebsite01/02/2016accepted
90
532160001/02/2016VulD...cvss3_vuldb_uiNsee CVSS documentation01/02/2016accepted
90
532159901/02/2016VulD...seealso79960 79961 7996301/02/2016accepted
100
532159801/02/2016VulD...cve_nvd_summaryBelkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remote attackers to obtain administrative privileges via certain changes to LockStatus and Login_Success values.cve.org01/02/2016accepted
100
532159701/02/2016VulD...cve_nvd_published1451520000cve.org01/02/2016accepted
100

36 more entries are not shown

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!