Belkin router found to contain serious vulnerabilities

Security researchers discovered several vulnerabilities in the popular Belkin N600 DB router this week. Due to the vulnerabilities, malicious parties can route internet traffic to malicious sites, among other things. There is currently no patch available.

This is reported by researchers from the American Carnegie Mellon University. They discovered that the router with the current firmware is vulnerable to various attacks. For example, by spoofing DNS responses, an attacker can route internet traffic to malicious sites.

It doesn’t stop there: a hacker who is on the same LAN can potentially get into the router’s online management panel. This is because the Belkin N600 does not have a password set for the panel by default. And if a password is set, the hacker can easily bypass the security by adjusting some variables when intercepting packets from the server.

According to Carnegie Mellon University, the model F9K1102 v2 Belkin routers with firmware version 2.10.17 are vulnerable. It may also be earlier versions of the firmware, but this has not yet been investigated. Belkin has not yet released a patch. The security researchers advise that only reliable hosts connect to the network and at least set a password.