CVE-2014-1635
EXPLOITEDBelkin N750 Router <F9K1103_WW_1.10.17m - Buffer Overflow
Title source: llmExploitation Summary
CVE-2014-1635 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Marco Vaz, including a Metasploit module exploits/linux/http/belkin_login_bof.
AI-analyzed exploit summary This exploit leverages a buffer overflow in the Belkin N750 router's guest network web interface via the 'jump' parameter in a POST request to '/login.cgi'. It injects a command to start a telnet daemon, granting unauthenticated root access.
Description
Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter.
Exploits (3)
This exploit leverages a buffer overflow in the Belkin N750 router's guest network web interface via the 'jump' parameter in a POST request to '/login.cgi'. It injects a command to start a telnet daemon, granting unauthenticated root access.
This repository contains the RouterSploit framework, an exploitation toolkit for embedded devices, including exploits, scanners, and credential testing modules. The framework is designed to test and exploit vulnerabilities in routers and other embedded systems.
This Metasploit module exploits a buffer overflow vulnerability in Belkin Play N750 routers via a malformed HTTP POST request to /login.cgi with an overly long 'jump' parameter. It achieves remote code execution by leveraging a cmdstager with an echo-based payload delivery mechanism.