RULE(RULE ID:324305)

Rule General Information
Release Date: 2020-02-14
Rule Name: Belkin N750 Router 1.10.22 Command Injection Vulnerability (CVE-2018-1144)
Severity:
CVE ID:
Rule Protection Details
Description: A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to proxy.cgi.
Impact: An attacker can execute arbitrary command via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Others
Reference: https://www.tenable.com/security/research/tra-2018-08
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
http://www.belkin.com