Belkin Wireless G Plus MIMO Router SaveCfgFile.cgi authentication bypass
| belkin-savecfgfile-authentication-bypass (39793) |  Medium Risk |
Description:
Belkin Wireless G Plus MIMO Router could allow a remote attacker to bypass security restrictions, caused by a vulnerability in the authentication process of the SaveCfgFile.cgi. A remote attacker from within the local network could exploit this vulnerability to bypass authentication and gain unauthorized access to possibly change router configuration information.
Platforms Affected:
- Belkin, F5D9230-4 3.01.53
Remedy:
No remedy available as of July 4, 2009.
Consequences:
Bypass Security
References:
- Belkin Web site, Belkin : Wireless G Router at http://catalog.belkin.com/IWCatProductPage.process?Merchant_Id=&Section_Id=201522&pcount=&Product_Id=136493.
- BID-27359: Belkin Wireless G Plus MIMO Router Remote Authentication Bypass Vulnerability
- CVE-2008-0403: The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and modify configuration via a direct request to SaveCfgFile.cgi.
- SA28554: Belkin Wireless G Plus MIMO Router SaveCfgFile.cgi Information Disclosure
- VUPEN/ADV-2008-0215: Belkin Wireless G Plus MIMO Router Information Disclosure Vulnerability
Reported:
Jan 20, 2008
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net