CVE-2014-2962
high · 7.8A public exploit / detection template exists
Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →
Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.
7.8
CVSS
47.1%
EPSS (exploit prob.)
99th
EPSS percentile
2014-06-19
Published
AV:N/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| belkin | n150_f9k1009_firmware | <= 1.00.07 |
| belkin | n150_f9k1009_firmware | 1.00.01 |
| belkin | n150_f9k1009 | v1 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2014-2962