CVE-2013-3088 - OpenCVE

Belkin N900 router (F9K1104v1) contains an Authentication Bypass using "Javascript debugging".

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

AV:N/AC:M/Au:N/C:C/I:C/A:C

Vendors & Products
CPE Configurations

Vendors	Products
Belkin	N900 Firmware N900

Configuration 1 [-]

AND

cpe:2.3:o:belkin:n900_firmware:1.00.23:*:*:*:*:*:*:*

cpe:2.3:h:belkin:n900:-:*:*:*:*:*:*:*

References

Link	Resource
http://securityevaluators.com/knowledge/case_studies/routers/belkin_n900.php	Third Party Advisory
https://www.ise.io/research/studies-and-papers/belkin_n900/	Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2019-12-26T22:46:19

Updated: 2019-12-26T22:46:19

Reserved: 2013-04-17T00:00:00

Link: CVE-2013-3088

JSON object: View

NVD Information

Status : Analyzed

Published: 2019-12-26T23:15:11.147

Modified: 2020-01-16T20:12:12.880

Link: CVE-2013-3088

JSON object: View

Redhat Information

No data.

CWE

CWE-287

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:belkin:n900_firmware:1.00.23:*:*:*:*:*:*:*", "matchCriteriaId": "4517CE7D-FF1A-4C0F-A5CA-9C46A00A89DC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:belkin:n900:-:*:*:*:*:*:*:*", "matchCriteriaId": "DAA39C1D-B29C-4098-AE0B-20EB4250912E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Belkin N900 router (F9K1104v1) contains an Authentication Bypass using \"Javascript debugging\"."}, {"lang": "es", "value": "El enrutador Belkin N900 (F9K1104v1), contiene un Omisi\u00f3n de Autenticaci\u00f3n usando \"Javascript debugging\"."}], "id": "CVE-2013-3088", "lastModified": "2020-01-16T20:12:12.880", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-12-26T23:15:11.147", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://securityevaluators.com/knowledge/case_studies/routers/belkin_n900.php"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://www.ise.io/research/studies-and-papers/belkin_n900/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}