Lucene search

[email protected]CVE-2012-4366

HistoryNov 20, 2012 - 12:55 a.m.

CVE-2012-4366

2012-11-2000:55:01

CWE-310

[email protected]

web.nvd.nist.gov

belkin

wireless routers

wpa2-psk

passphrase

security vulnerability

cve-2012-4366

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.039 Low

EPSS

Percentile

92.0%

JSON

Belkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, and N300 Model F7D2301v1 generate a predictable default WPA2-PSK passphrase based on eight digits of the WAN MAC address, which allows remote attackers to access the network by sniffing the beacon frames.

Affected configurations

NVD

Node

belkinn150_wireless_routerMatchf7d1301v1

belkinn300_wireless_routerMatchf7d2301v1

belkinn450_wireless_routerMatchf9k1105v2

belkinn900_wireless_routerMatchf9k1104v1

CPENameOperatorVersion
belkin:n150_wireless_routerbelkin n150 wireless routereqf7d1301v1
belkin:n300_wireless_routerbelkin n300 wireless routereqf7d2301v1
belkin:n450_wireless_routerbelkin n450 wireless routereqf9k1105v2
belkin:n900_wireless_routerbelkin n900 wireless routereqf9k1104v1

CPE	Name	Operator	Version
belkin:n150_wireless_router	belkin n150 wireless router	eq	f7d1301v1
belkin:n300_wireless_router	belkin n300 wireless router	eq	f7d2301v1
belkin:n450_wireless_router	belkin n450 wireless router	eq	f9k1105v2
belkin:n900_wireless_router	belkin n900 wireless router	eq	f9k1104v1

References

archives.neohapsis.com/archives/bugtraq/2012-11/0070.html

www.jakoblell.com/blog/2012/11/19/cve-2012-4366-insecure-default-wpa2-passphrase-in-multiple-belkin-wireless-routers/

www.securityfocus.com/bid/56591

exchange.xforce.ibmcloud.com/vulnerabilities/80157

3.3 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.039 Low

EPSS

Percentile

92.0%

JSON

Related for CVE-2012-4366

securityvulns2 cvelist2 prion2 nvd2 cve1