Absolute Path Traversal Vulnerability in Belkin N150 Router
CVE-2014-2962

Currently unrated

Key Information:

Vendor

Belkin

Status
N150 F9k1009 Firmware
N150 F9k1009
Vendor
CVE Published:
19 June 2014

What is CVE-2014-2962?

An absolute path traversal vulnerability exists in the webproc CGI module of the Belkin N150 F9K1009 v1 router, enabling remote attackers to gain unauthorized access to sensitive files on the system. By manipulating the 'getpage' parameter with a crafted full pathname, attackers can exploit this weakness to read arbitrary files, exposing potentially sensitive data.

References

https://www.exploit-db.com/exploits/38488/
exploitx_refsource_EXPLOIT-DB
http://www.kb.cert.org/vuls/id/774788
third-party-advisoryx_refsource_CERT-VN
http://www.belkin.com/us/support-article?articleNum=109400
x_refsource_CONFIRM

EPSS Score

90% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.