PT-2014-4984

CVE-2014-2962

·

Published

2014-06-19

·

Updated

2016-12-24

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Belkin N150 F9K1009 v1 router with firmware before 1.00.08
Description The issue is related to an absolute path traversal vulnerability in the webproc cgi module. This allows remote attackers to read arbitrary files by providing a full pathname in the getpage parameter.
Recommendations For firmware versions before 1.00.08, update the firmware to version 1.00.08 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2014-2962
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com