Symlink Traversal vulnerability in Belkin N900 due to misconfiguration in the SMB service.
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Link | Tags |
---|---|
https://www.ise.io/casestudies/exploiting-soho-routers/ | third party advisory mitigation |
https://www.ise.io/soho_service_hacks/ | third party advisory exploit |
https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf | third party advisory |