Critical severity9.8NVD Advisory· Published Dec 31, 2015· Updated May 6, 2026
CVE-2015-5989
CVE-2015-5989
Description
Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remote attackers to obtain administrative privileges via certain changes to LockStatus and Login_Success values.
Affected products
1- cpe:2.3:o:zyxel:gs1900-10hp_firmware:*:*:*:*:*:*:*:*Range: <2.50\(aazi.0\)c0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.kb.cert.org/vuls/id/201168nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.