PT-2012-5361 · Belkin · N300+3

Jakob Lell + 1 · Publicado 2012-11-20 · Atualizado 2017-08-29 · CVE-2012-4366

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Belkin wireless routers Surf N150 Model F7D1301v1 Belkin wireless routers N900 Model F9K1104v1 Belkin wireless routers N450 Model F9K1105V2 Belkin wireless routers N300 Model F7D2301v1

Description The issue allows remote attackers to access the network by sniffing the beacon frames, due to a predictable default WPA2-PSK passphrase generated based on eight digits of the WAN MAC address.

Recommendations For Belkin wireless routers Surf N150 Model F7D1301v1, change the default WPA2-PSK passphrase to a unique and strong password. For Belkin wireless routers N900 Model F9K1104v1, change the default WPA2-PSK passphrase to a unique and strong password. For Belkin wireless routers N450 Model F9K1105V2, change the default WPA2-PSK passphrase to a unique and strong password. For Belkin wireless routers N300 Model F7D2301v1, change the default WPA2-PSK passphrase to a unique and strong password.

Exploit

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2012-4366

Produtos afetados

N300

N450

N900

Surf N150

Referências · 6

• 🔥 https://exploit-db.com/exploits/38164 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-4366 · Nota de Segurança
• http://securityfocus.com/bid/56591 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80157 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2012-11/0070.html · Nota
• http://jakoblell.com/blog/2012/11/19/cve-2012-4366-insecure-default-wpa2-passphrase-in-multiple-belkin-wireless-routers · Nota