CVE-2008-7115
Belkin Wireless G Router F5D7632-4V6 - Unauthenticated Privilege Escalation via Direct CGI Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-7115. PoCs published by noensr.
AI-analyzed exploit summary This HTML-based exploit bypasses the web interface password protection of the Belkin wireless G router (F5D7632-4V6) with firmware 6.01.08 by submitting crafted POST requests to various CGI endpoints, allowing unauthorized configuration changes including DNS poisoning, password changes, and factory resets.
Description
The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to (1) statusprocess.exe, (2) system_all.exe, or (3) restore.exe in cgi-bin/. NOTE: the setup_dns.exe vector is already covered by CVE-2008-1244.
Exploits (1)
This HTML-based exploit bypasses the web interface password protection of the Belkin wireless G router (F5D7632-4V6) with firmware 6.01.08 by submitting crafted POST requests to various CGI endpoints, allowing unauthorized configuration changes including DNS poisoning, password changes, and factory resets.