PT-2022-20004 · Belkin · Belkin N300

Published 2022-05-18 · Updated 2022-05-30 · CVE-2022-30105

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Belkin N300 Firmware version 1.00.08

Description The script located at "/setting hidden.asp" exhibits multiple remote command injection vulnerabilities. The parameters in the form are not properly sanitized after being submitted to the web interface in a POST request. With specially crafted parameters, it is possible to inject an OS command which will be executed with root privileges, as the web interface and all processes on the device run as root.

Recommendations For Belkin N300 Firmware version 1.00.08, consider disabling access to the "/setting hidden.asp" script until a patch is available. Restrict access to the web interface to minimize the risk of exploitation. Avoid using the vulnerable parameters in the form until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-30105

Affected Products

Belkin N300

References · 5

• 🔥 https://exploitee.rs/index.php/Belkin_N300#Remote_Root · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-30105 · Security Note
• https://osv.dev/vulnerability/CVE-2022-30105 · Vendor Advisory
• https://t.me/cibsecurity/42942 · Telegram Post
• https://t.me/cvenotify/30879 · Telegram Post