Skip to content

CVE-2015-5989 Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remote attackers to obtain administrative privileges via certain changes to LockStatu...

CriticalCVSS 9.8 EPSS 2.8%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remote attackers to obtain administrative privileges via certain changes to LockStatus and Login_Success values.

Affected products

ProductAffected versionsFixed in
zyxel GS1900-10HP firmware < 2.50\(aazi.0\)c0 2.50\(aazi.0\)c0

References

  • VU#201168 third-party-advisory us-government-resource