« Volver al listado

CVE-2012-4366

Estado: ModificadaBaja (3.3)—

Belkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, and N300 Model F7D2301v1 generate a predictable default WPA2-PSK passphrase based on eight digits of the WAN MAC address, which allows remote attackers to access the network by sniffing the beacon frames.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Belkin — N150 Wireless RouterBelkin — N300 Wireless RouterBelkin — N450 Wireless RouterBelkin — N900 Wireless Router

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-4366",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.3,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-11-20T00:55:01.010",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-11/0070.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.jakoblell.com/blog/2012/11/19/cve-2012-4366-insecure-default-wpa2-passphrase-in-multiple-belkin-wireless-routers/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/56591",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80157",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-11/0070.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.jakoblell.com/blog/2012/11/19/cve-2012-4366-insecure-default-wpa2-passphrase-in-multiple-belkin-wireless-routers/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/56591",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80157",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Belkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, and N300 Model F7D2301v1 generate a predictable default WPA2-PSK passphrase based on eight digits of the WAN MAC address, which allows remote attackers to access the network by sniffing the beacon frames."
    },
    {
      "lang": "es",
      "value": "Los enrutadores inalámbricos Belkin Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, y N300 Model F7D2301v1, generan un valor predeterminado previsible WPA2-PSK basado en la dirección MAC, que permite a atacantes remotos acceder a la red esnifando de las tramas de beacon."
    }
  ],
  "lastModified": "2026-06-16T23:44:54.063",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:belkin:n150_wireless_router:f7d1301v1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79D38126-4680-4AEE-A964-BAA80EBAE31B"
            },
            {
              "criteria": "cpe:2.3:h:belkin:n300_wireless_router:f7d2301v1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8E3A656-1727-4BFE-A1FB-738F92AD64B5"
            },
            {
              "criteria": "cpe:2.3:h:belkin:n450_wireless_router:f9k1105v2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E491CAA9-8290-48BC-A6E0-D5360A527039"
            },
            {
              "criteria": "cpe:2.3:h:belkin:n900_wireless_router:f9k1104v1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "866A8962-B81E-4CF0-A6AC-3FE78729C621"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}