CVE-2014-1635

Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

67.49% chance of exploitation in the next 30 days, 99th percentile

Published

2014-11-12

Updated

2024-08-06

Proof-of-concept exploits (2)

• https://labs.integrity.pt/articles/from-0-day-to-exploit-buffer-overflow-in-belkin-n750-c…
• http://www.exploit-db.com/exploits/35184

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/belkin_login_bof.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/35184

References

• CVE Record
• NVD entry

Related

• CVE-2014-1632
• CVE-2014-1636
• CVE-2014-1631
• CVE-2014-1637
• CVE-2014-1619
• CVE-2014-1649