CVE-2012-4366

Belkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, and N300 Model F7D2301v1 generate a predictable default WPA2-PSK passphrase based on eight digits of the WAN MAC address, which allows remote attackers to access the network by sniffing the beacon frames.

Score

CVSS 2.0 3.3 Low

Status

Modified - cve@mitre.org

Published

2012-11-20

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• N150 Wireless Router (Belkin)
• N300 Wireless Router (Belkin)
• N450 Wireless Router (Belkin)
• N900 Wireless Router (Belkin)

References

• http://archives.neohapsis.com/archives/bugtraq/2012-11/0070.html
• http://www.jakoblell.com/blog/2012/11/19/cve-2012-4366-insecure-default-wpa2-passphrase-in-multiple-belkin-wireless-rou…
• http://www.securityfocus.com/bid/56591
• https://exchange.xforce.ibmcloud.com/vulnerabilities/80157