← Back

N300 Firmware

n300_firmware

Vendor: Belkin • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-30105
1Belkin
1N300 Firmware
Nov 21, 2024
May 18, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible before and after configuring the device, exhibits multiple remote command injection vulnerabilities. The following parameter...Show more
In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible before and after configuring the device, exhibits multiple remote command injection vulnerabilities. The following parameters in the [form name] form; [list vulnerable parameters], are not properly sanitized after being submitted to the web interface in a POST request. With specially crafted parameters, it is possible to inject a an OS command which will be executed with root privileges, as the web interface, and all processes on the device, run as root.Show less
CVE-2013-3091
1Belkin
1N300 Firmware
Nov 21, 2024
Feb 7, 2020
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
An Authentication Bypass vulnerability in Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication using "Javascript debugging."
CVE-2013-3092
1Belkin
2N300
N300 Firmware
May 6, 2026
Sep 29, 2014
N/A· v4
N/A· v3
8.3 HIGH· v2
The Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and gain privileges via vectors related to incorrect validation of the HTTP Authorization header.
CVE-2013-3089
1Belkin
2N300
N300 Firmware
May 6, 2026
Sep 29, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in apply.cgi in Belkin N300 (F7D7301v1) router allows remote attackers to hijack the authentication of administrators for requests that modify configuration.