Command Injection Vulnerability in Belkin N300 Dual-Band Wi-Fi Range Extender

CVE-2015-5536

What is CVE-2015-5536?

The Belkin N300 Dual-Band Wi-Fi Range Extender is susceptible to a command injection vulnerability that may be exploited by remote authenticated users. By manipulating certain parameters such as sub_dir in formUSBStorage, pinCode in formWpsStart or formiNICWpsStart, wps_enrolee_pin in formWlanSetupWPS, and other unspecified parameters in various forms, attackers can execute arbitrary commands on the device. This flaw underscores the importance of timely updates and rigorous security measures in network devices to prevent unauthorized access and maintain integrity.

References