CVE-2014-2962

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 47.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-06-19 · updated 2026-06-17
Weakness: CWE-22

Description

Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.

Affected products

Belkin N150 F9K1009: v1
Belkin N150 F9K1009 Firmware: through 1.00.07; 1.00.01

References

http://www.belkin.com/us/support-article?articleNum=109400
http://www.kb.cert.org/vuls/id/774788
https://www.exploit-db.com/exploits/38488/
http://www.belkin.com/us/support-article?articleNum=109400
http://www.kb.cert.org/vuls/id/774788
https://www.exploit-db.com/exploits/38488/

Get alerted when CVE-2014-2962 or the next vulnerability affects your stack