Belkin: Security Vulnerabilities
Belkin n750 routers have a buffer overflow.
CVSS Score
9.8
EPSS Score
0.005
Published
2020-02-13
An Authentication Bypass vulnerability in Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication using "Javascript debugging."
CVSS Score
9.8
EPSS Score
0.05
Published
2020-02-07
Belkin Wemo Switch before WeMo_US_2.00.2176.PVT could allow remote attackers to upload arbitrary files onto the system.
CVSS Score
9.8
EPSS Score
0.438
Published
2020-01-28
A Stack-based Buffer Overflow vulnerability in libbelkin_api.so component of Belkin WeMo Insight Switch firmware allows a local attacker to obtain code execution on the device. This issue affects: Belkin WeMo Insight Switch firmware version 2.00.11396 and prior versions.
CVSS Score
8.3
EPSS Score
0.002
Published
2020-01-27
An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2.
CVSS Score
9.8
EPSS Score
0.001
Published
2019-12-26
Belkin N900 router (F9K1104v1) contains an Authentication Bypass using "Javascript debugging".
CVSS Score
9.8
EPSS Score
0.002
Published
2019-12-26
Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service.
CVSS Score
7.5
EPSS Score
0.006
Published
2019-11-13
An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service (persistent rules-processing outage) via a crafted ruleDbBody element in a StoreRules request to the upnp/control/rules1 URI, because database corruption occurs.
CVSS Score
7.5
EPSS Score
0.01
Published
2019-10-12
The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. A simple POST request to /upnp/control/basicevent1 can allow an attacker to execute commands without authentication.
CVSS Score
9.8
EPSS Score
0.394
Published
2019-06-10
Stack-based Buffer Overflow vulnerability in libUPnPHndlr.so in Belkin Wemo Insight Smart Plug allows remote attackers to bypass local security protection via a crafted HTTP post packet.
CVSS Score
5.9
EPSS Score
0.01
Published
2018-08-21