Belkin F9K1009 and F9K1010 Web Interface Hard-Coded Credentials Vulnerability

A critical vulnerability exists in the Belkin F9K1009 and F9K1010 routers, specifically in the Web Interface of firmware versions 2.00.04 and 2.00.09. This vulnerability involves hard-coded credentials that allow unauthorized users to log in directly to the router's administrative interface. The issue can be exploited remotely, without any authentication requirements. The hard-coded credentials consist of a username and password, both set to '00E0A6-111'.

Impact

Exploitation of this vulnerability allows for unauthorized access to the router's administrative functions, potentially leading to further configuration changes or management of the device.

Reproduction

The vulnerability can be reproduced by accessing the Web Interface of the affected router models and firmware versions. Once the login page is reached, the hard-coded credentials can be used to gain administrative access. This can be done remotely, without any need for user authentication.