CVE-2018-1146

High · 7.5

CVSS

7.5

EPSS

28.2%

Published

Apr 19, 2018

CISA due date

—

The record

A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.cgi. When enabled the telnet session requires no password and provides root access.

Affected packages

Ecosystem	Package	Introduced	Fixed