Vulnerability record · CVE-2014-2962 · published 19 June 2014
CVE-2014-2962: Belkin N150 router webproc CGI path traversal allows arbitrary file read
Belkin · N150 F9k1009 Firmware
The webproc CGI module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 is vulnerable to absolute path traversal. A remote attacker can supply a full pathname in the getpage parameter to read arbitrary files on the device. Because the router is typically internet-facing or on a trusted network segment, this exposes sensitive configuration and credential material.
Description
Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.
AV:N/AC:L/Au:N/C:C/I:N/A:N
Automated analysis
high priorityThe vulnerability allows unauthenticated remote file read with a public exploit and high EPSS, though it is not in KEV and affects a specific legacy router model.
What it is
The webproc CGI module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 is vulnerable to absolute path traversal. A remote attacker can supply a full pathname in the getpage parameter to read arbitrary files on the device. Because the router is typically internet-facing or on a trusted network segment, this exposes sensitive configuration and credential material.
Impact
An attacker gains read access to arbitrary files on the router, which can include configuration files, stored credentials, and other sensitive data. This is a confidentiality-only impact; integrity and availability are not affected.
Attack surface
The flaw is reachable over the network through the webproc CGI endpoint via the getpage parameter, with no authentication required per the CVSS vector (AV:N/AC:L/Au:N). No user interaction is indicated.
Exploitation
No CISA KEV listing is present, but a public Exploit-DB entry (38488) exists and EPSS is high at roughly 0.47 (98.8th percentile), indicating elevated likelihood of exploitation.
What to do
- Upgrade the Belkin N150 F9K1009 v1 firmware to 1.00.08 or later per the vendor advisory.
- If the device cannot be updated, restrict access to the webproc CGI and administrative interface to trusted networks only.
- Disable remote administration and WAN-side management on the router.
- Replace end-of-life hardware that no longer receives firmware updates.
- Monitor for path traversal patterns targeting the getpage parameter.
Detection
- Inspect HTTP request logs for getpage parameters containing absolute paths or traversal sequences such as ../ or /etc/.
- Alert on requests to the webproc CGI endpoint from unexpected or external source addresses.
- Review router configuration and file access logs for reads of sensitive files outside the web root.
This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.
Affected products
2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://www.belkin.com/us/support-article?articleNum=109400 | PatchVendor Advisory |
| http://www.kb.cert.org/vuls/id/774788 | Third Party AdvisoryUS Government Resource |
| https://www.exploit-db.com/exploits/38488/ | |
| http://www.belkin.com/us/support-article?articleNum=109400 | PatchVendor Advisory |
| http://www.kb.cert.org/vuls/id/774788 | Third Party AdvisoryUS Government Resource |
| https://www.exploit-db.com/exploits/38488/ |
Track CVE-2014-2962 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2014-2962), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
