belkin Vulnerability Advisory Catalog

Total 89 security vulnerabilities recorded for belkin software and firmware.

← Back to All Vendors
CVE-2013-3088 CRITICAL
Component: n900_firmware

Belkin N900 router (F9K1104v1) contains an Authentication Bypass using "Javascript debugging"....

📅 2019-12-26
CVSS 9.8 Dossier →
CVE-2013-3085 CRITICAL
Component: f5d8236-4_firmware

An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2....

📅 2019-12-26
CVSS 9.8 Dossier →
Component: n900_firmware

Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service....

📅 2019-11-13
CVSS 7.5 Dossier →
Component: wemo_switch_28b_firmware

An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11057.PVT-OWRT-SNS devices. They allow remote attackers to cause a denial of service (persis...

📅 2019-10-12
CVSS 7.5 Dossier →
CVE-2019-12780 CRITICAL
Component: crock-pot_smart_slow_cooker_with_wemo_firmware

The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action. A simple P...

📅 2019-06-10
CVSS 9.8 Dossier →
CVE-2018-6692 CRITICAL
Component: wemo_insight_smart_plug_firmware

Stack-based Buffer Overflow vulnerability in libUPnPHndlr.so in Belkin Wemo Insight Smart Plug allows remote attackers to bypass local security protec...

📅 2018-08-21
CVSS 10.0 Dossier →
Component: n750_firmware

A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.cgi. When e...

📅 2018-04-19
CVSS 7.5 Dossier →
CVE-2018-1145 CRITICAL
Component: n750_firmware

A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy...

📅 2018-04-19
CVSS 9.8 Dossier →
CVE-2018-1144 CRITICAL
Component: n750_firmware

A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to prox...

📅 2018-04-19
CVSS 9.8 Dossier →
CVE-2018-1143 CRITICAL
Component: n750_firmware

A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to twon...

📅 2018-04-19
CVSS 9.8 Dossier →
CVE-2015-5536 UNKNOWN
Component: n300_dual-band_wi-fi_range_extender_firmware

Belkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10 allows remote authenticated users to execute arbitrary commands via the (1) su...

📅 2015-08-13
CVSS 9.0 Dossier →
CVE-2014-1635 UNKNOWN
Component: n750_wireless_router_firmware

Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary ...

📅 2014-11-12
CVSS 10.0 Dossier →
CVE-2013-3092 UNKNOWN
Component: n300_firmware

The Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and gain privileges via vectors related to incorrect validation of...

📅 2014-09-29
CVSS 8.3 Dossier →
CVE-2013-3089 UNKNOWN
Component: n300_firmware

Cross-site request forgery (CSRF) vulnerability in apply.cgi in Belkin N300 (F7D7301v1) router allows remote attackers to hijack the authentication of...

📅 2014-09-29
CVSS 6.8 Dossier →
CVE-2013-3086 UNKNOWN
Component: n900_firmware

Cross-site request forgery (CSRF) vulnerability in util_system.html in Belkin N900 router allows remote attackers to hijack the authentication of admi...

📅 2014-09-29
CVSS 6.8 Dossier →
CVE-2013-3083 UNKNOWN
Component: f5d8236-4_v2

Cross-site request forgery (CSRF) vulnerability in cgi-bin/system_setting.exe in Belkin F5D8236-4 v2 allows remote attackers to hijack the authenticat...

📅 2014-09-29
CVSS 6.8 Dossier →
CVE-2014-2962 UNKNOWN
Component: n150_f9k1009_firmware

Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attack...

📅 2014-06-19
CVSS 7.8 Dossier →
CVE-2013-6952 UNKNOWN
Component: wemo_home_automation_firmware

The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attackers to spoof firmware updates and...

📅 2014-02-22
CVSS 10.0 Dossier →
CVE-2013-6951 UNKNOWN
Component: wemo_home_automation_firmware

The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, which allows man-in-the-middle at...

📅 2014-02-22
CVSS 7.1 Dossier →
CVE-2013-6950 UNKNOWN
Component: wemo_home_automation_firmware

The Belkin WeMo Home Automation firmware before 3949 does not use SSL for the distribution feed, which allows man-in-the-middle attackers to install a...

📅 2014-02-22
CVSS 7.8 Dossier →
CVE-2013-6949 UNKNOWN
Component: wemo_home_automation_firmware

The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hijack connec...

📅 2014-02-22
CVSS 9.3 Dossier →
CVE-2013-6948 UNKNOWN
Component: wemo_home_automation_firmware

The peerAddresses API in the Belkin WeMo Home Automation firmware before 3949 allows remote attackers to read arbitrary files via an XML document cont...

📅 2014-02-22
CVSS 7.8 Dossier →
CVE-2013-3090 UNKNOWN
Component: n300

Multiple cross-site scripting (XSS) vulnerabilities in Belkin N300 router allow remote attackers to inject arbitrary web script or HTML via the Guest ...

📅 2014-01-30
CVSS 4.3 Dossier →
CVE-2013-3087 UNKNOWN
Component: n900

Multiple cross-site scripting (XSS) vulnerabilities in Belkin N900 router allow remote attackers to inject arbitrary web script or HTML via the (1) ss...

📅 2014-01-30
CVSS 4.3 Dossier →
Page 3 of 4 (89 Total Records)