CVE-2008-0403

Belkin F5D9230-4 - Unauthenticated Configuration Access via SaveCfgFile.cgi

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-0403. PoCs published by DarkFig.

AI-analyzed exploit summary This is a writeup describing an authentication bypass vulnerability in Belkin Wireless G Plus MIMO Router F5D9230-4. The vulnerability allows unauthenticated access to the configuration file via SaveCfgFile.cgi, exposing sensitive information such as passwords and keys.

Description

The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and modify configuration via a direct request to SaveCfgFile.cgi.

Exploits (1)

exploitdb WRITEUP VERIFIED

by DarkFig · textremotehardware

https://www.exploit-db.com/exploits/4941

View Code ZIP pw:eip

This is a writeup describing an authentication bypass vulnerability in Belkin Wireless G Plus MIMO Router F5D9230-4. The vulnerability allows unauthenticated access to the configuration file via SaveCfgFile.cgi, exposing sensitive information such as passwords and keys.

Classification

Writeup 100%

Attack Type

Auth Bypass

Complexity

Trivial

Reliability

Reliable

Target: Belkin Wireless G Plus MIMO Router F5D9230-4 (firmware version 3.01.53)

No auth needed

Prerequisites: network access to the router

MITRE ATT&CK