PT-2012-5361 · Belkin · N300+3

Jakob Lell + 1 · Published 2012-11-20 · Updated 2017-08-29 · CVE-2012-4366

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Belkin wireless routers Surf N150 Model F7D1301v1 Belkin wireless routers N900 Model F9K1104v1 Belkin wireless routers N450 Model F9K1105V2 Belkin wireless routers N300 Model F7D2301v1

Description The issue allows remote attackers to access the network by sniffing the beacon frames, due to a predictable default WPA2-PSK passphrase generated based on eight digits of the WAN MAC address.

Recommendations For Belkin wireless routers Surf N150 Model F7D1301v1, change the default WPA2-PSK passphrase to a unique and strong password. For Belkin wireless routers N900 Model F9K1104v1, change the default WPA2-PSK passphrase to a unique and strong password. For Belkin wireless routers N450 Model F9K1105V2, change the default WPA2-PSK passphrase to a unique and strong password. For Belkin wireless routers N300 Model F7D2301v1, change the default WPA2-PSK passphrase to a unique and strong password.

Exploit

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2012-4366

Affected Products

N300

N450

N900

Surf N150

References · 6

• 🔥 https://exploit-db.com/exploits/38164 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-4366 · Security Note
• http://securityfocus.com/bid/56591 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80157 · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-11/0070.html · Note
• http://jakoblell.com/blog/2012/11/19/cve-2012-4366-insecure-default-wpa2-passphrase-in-multiple-belkin-wireless-routers · Note