CVE-2018-1146

A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.cgi. When enabled the telnet session requires no password and provides root access.

Score

CVSS 3.0 7.5 High

Status

Modified - vulnreport@tenable.com

Published

2018-04-19

Last modified

2024-09-17

Weaknesses

CWE-284

Affected products

• N750 Db Wi-fi Dual-band N Gigabit Router F9k1103 (Belkin)
• N750 Firmware (Belkin)

References

• https://www.tenable.com/security/research/tra-2018-08