Summaryinfo

A vulnerability described as problematic has been identified in Belkin N300 -/1.00.06. This issue affects some unknown processing. Such manipulation leads to improper authentication. This vulnerability is documented as CVE-2013-3092. There is not any exploit available.

Detailsinfo

A vulnerability was found in Belkin N300 -/1.00.06 (Wireless LAN Software) and classified as critical. Affected by this issue is an unknown code block. The manipulation with an unknown input leads to a improper authentication vulnerability. Using CWE to declare the problem leads to CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. Impacted is confidentiality, integrity, and availability. CVE summarizes:

The Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and gain privileges via vectors related to incorrect validation of the HTTP Authorization header.

The weakness was released 09/29/2014 (Website). The advisory is shared for download at securityevaluators.com. This vulnerability is handled as CVE-2013-3092 since 04/17/2013. The exploitation is known to be easy. Access to the local network is required for this attack. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Entries connected to this vulnerability are available at VDB-12069, VDB-71635 and VDB-71634. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Wireless LAN Software

Vendor

• Belkin

Name

• N300

Version

• -
• 1.00.06

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion