PT-2015-7098 · Belkin · Belkin F9K1102

Joel Land · Publicado 2015-12-31 · Atualizado 2015-12-31 · CVE-2015-5988

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Belkin F9K1102 version 2.10.17

Description The web management interface has a blank password, allowing remote attackers to obtain administrative privileges by leveraging a LAN session.

Recommendations For Belkin F9K1102 version 2.10.17, consider changing the default password to a strong and unique one to prevent unauthorized access. As a temporary workaround, restrict LAN access to the device until a patch is available.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2015-5988

Produtos afetados

Belkin F9K1102

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-5988 · Nota de Segurança
• https://kb.cert.org/vuls/id/201168 · Nota