CVE-2018-1144

A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi

published April 19, 2018

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

⚠️ A single crafted HTTP request can give an attacker remote control as root on your Belkin N750. That's like inviting a stranger into your home while you're still there! Imagine you left your front door unlocked and someone waltzed in, not just to peek around but to rearrange your furniture too. This vulnerability is just as unsettling, allowing a malicious actor to execute commands directly on your router. An attacker could potentially change settings, intercept your network traffic, or even brick the device entirely, leaving you with a fancy paperweight! Just think of all the personal data and devices on your network that could be compromised if they gain control.

Put simply

Imagine you left your front door unlocked and someone waltzed in, not just to peek around but to rearrange your furniture too. This vulnerability is just as unsettling, allowing a malicious actor to execute commands directly on your router. CVE-2018-1144 is a remote command execution vulnerability in the Belkin N750, where an unauthenticated user can send a specially crafted HTTP request to proxy.cgi to execute commands as root without any authentication.

What to do

An attacker could potentially change settings, intercept your network traffic, or even brick the device entirely, leaving you with a fancy paperweight! Just think of all the personal data and devices on your network that could be compromised if they gain control. To safeguard your network, update your firmware to a patched version if available or consider isolating the device from your main network. Always ensure your routers have proper security measures like strong passwords and firewalls configured. You've got this! With a few simple steps, you can secure your network and keep those unwanted intruders out. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06748 · 93.9th percentile
Published
2018-04-19T13:00Z
EPSS history
Timeline
  • 19 APR 13:00Z
    A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi
    cvelistv5