What is the CVSS score of CVE-2015-5536?

CVE-2015-5536 has a CVSS 2.0 base score of 9.0 (Critical). CVSS vector: AV:N/AC:L/Au:S/C:C/I:C/A:C. EPSS exploitation probability: 3.4%.

Is there a patch available for CVE-2015-5536?

Yes, a patch is available for CVE-2015-5536. Update the affected software to the latest version immediately.

N300 Dual Band Wi Fi Range Extender Firmware CVE-2015-5536

CRITICAL

Permissions, Privileges, and Access Controls (CWE-264)

2015-08-13 cve@mitre.org

Privilege Escalation N300 Dual Band Wi Fi Range Extender Firmware

9.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

9.0 CRITICAL

AV:N/AC:L/Au:S/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:S/C:C/I:C/A:C

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Aug 13, 2015 - 14:59 cve.org

CRITICAL 9.0

DescriptionCVE.org

Belkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10 allows remote authenticated users to execute arbitrary commands via the (1) sub_dir parameter in a formUSBStorage request; pinCode parameter in a (2) formWpsStart or (3) formiNICWpsStart request; (4) wps_enrolee_pin parameter in a formWlanSetupWPS request; or unspecified parameters in a (5) formWlanMP, (6) formBSSetSitesurvey, (7) formHwSet, or (8) formConnectionSetting request.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-264. Belkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10 allows remote authenticated users to execute arbitrary commands via the (1) sub_dir parameter in a formUSBStorage request; pinCode parameter in a (2) formWpsStart or (3) formiNICWpsStart request; (4) wps_enrolee_pin parameter in a formWlanSetupWPS request; or unspecified parameters in a (5) formWlanMP, (6) formBSSetSitesurvey, (7) formHwSet, or (8) formConnectionSetting request. Affected products include: Belkin N300 Dual-Band Wi-Fi Range Extender Firmware. Version information: before 1.04.10.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.