Belkin N300 Range Extender formWlanMP RCE Vulnerability (CVE-2015-5536)

Vulnerability Key Information Basic Information Vulnerability Title: Belkin N300 Dual-Band Wi-Fi Range Extender formWlanMP Remote Code Execution Vulnerability Vulnerability ID: ZDI-15-349, ZDI-CAN-2637 CVE ID: CVE-2015-5536 CVSS Score: 9.0, AV:N/AC:L/Au:S/C:C/I:C/A:C Affected Vendor: Belkin Affected Product: N300 Dual-Band Wi-Fi Range Extender Vulnerability Details Vulnerability Description: This vulnerability allows remote attackers to execute arbitrary code on vulnerable Belkin N300 Dual-Band Wi-Fi Range Extender installations. Exploiting this vulnerability requires authentication. The specific flaw exists in the handling of formWlanMP requests, where arbitrary operating system commands can be injected during request parameter processing, enabling remote attackers to execute remote code with root privileges. Additional Information Vendor Update: Belkin has released an update to fix this vulnerability. More details can be found at: http://www.belkin.com/us/support-article?articleNum=4975 Disclosure Timeline: - 2014-11-26: Vulnerability reported to vendor - 2015-07-20: Coordinated public advisory release Discoverer: Elvis Collado of HP DV Labs Customer Protection Trend Micro TippingPoint IPS customers are protected against this vulnerability via Digital Vaccine filter ID ['17172']. For more product information on TippingPoint IPS, visit: http://www.tippingpoint.com

Goal Reached Thanks to every supporter — we hit 100%!

Belkin N300 Range Extender formWlanMP RCE Vulnerability (CVE-2015-5536)