CVE-2012-4366 Weak cryptography in n/a
Attackers can predict default WPA2 passwords from MAC addresses to gain unauthorized network access on Belkin routers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-4366?
CVE-2012-4366 is a low-severity vulnerability in n/a, published on 20 Nov 2012. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Belkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, and N300 Model F7D2301v1 generate a predictable default WPA2-PSK passphrase based on eight digits of the WAN MAC address, which allows remote attackers to access the network by sniffing the beacon frames.
Weakness: CWE-310
Which versions are affected by CVE-2012-4366?
It affects 4 products.
Products include Belkin N150 Wireless Router, Belkin N300 Wireless Router, Belkin N450 Wireless Router, Belkin N900 Wireless Router.
How do I fix CVE-2012-4366?
No fix has been published for CVE-2012-4366 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-4366 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2012-4366 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-f446-wm48-q9x7.