CVE-2014-2962

Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.

Score

CVSS 2.0 7.8 High

Status

Modified - cret@cert.org

Published

2014-06-19

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• N150 F9k1009 (Belkin)
• N150 F9k1009 Firmware (Belkin)

References

• http://www.belkin.com/us/support-article?articleNum=109400
• http://www.kb.cert.org/vuls/id/774788
• https://www.exploit-db.com/exploits/38488/