CVE-2014-1635

Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via…

published November 12, 2014

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
—
EPSS
67%
Percentile
99.3
In the wild
Unconfirmed
What it is

⚠️ This buffer overflow is like leaving the door of your router wide open! Remote attackers can waltz right in by sending a long string through the jump parameter in login.cgi. 🔓 Think of your router as a café. If the barista is so distracted by a customer shouting a long order that they forget to check what’s actually being served, they might mistakenly hand over the keys to the whole place! If exploited, a sneaky attacker could execute arbitrary code on your router, potentially opening up your entire network to unauthorized access and control. This could lead to a complete breach of your home security, making it an absolutely devastating scenario if you’re not careful!

Put simply

Think of your router as a café. If the barista is so distracted by a customer shouting a long order that they forget to check what’s actually being served, they might mistakenly hand over the keys to the whole place! This vulnerability occurs in the MiniHttpd service of the Belkin N750 Router, where a buffer overflow in the login.cgi script allows attackers to manipulate the jump parameter. By sending a specially crafted long string, they can overwrite memory regions and execute malicious code.

What to do

If exploited, a sneaky attacker could execute arbitrary code on your router, potentially opening up your entire network to unauthorized access and control. This could lead to a complete breach of your home security, making it an absolutely devastating scenario if you’re not careful! To protect yourself, immediately update the firmware to version F9K1103_WW_1.10.17m or later. Regularly check for firmware updates and consider changing the default admin credentials to something more secure. 🛡️ You've got this! Following these steps will help keep your network secure and your data safe. 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.67487 · 99.3th percentile
Published
2014-11-12T16:00Z
EPSS history
Timeline
  • 12 NOV 16:00Z
    Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via…
    cvelistv5