CNNVD-202508-3664 Information
CNNVD ID
CNNVD-202508-3664
Related CVE
- CNNVD Published: 2025-08-30
Description (Chinese)
Belkin Bulldog Plus是加拿大Belkin公司的一款不间断电源管理软件。 Belkin Bulldog Plus 4.0.2 build 1219版本存在安全漏洞,该漏洞源于Web服务认证处理程序对Authorization标头验证不足,可能导致栈缓冲区溢出和远程代码执行。
Description (English)
Belkin Bulldog Plus is an uninterruptible power supply management software from Belkin Canada. Belkin Bulldog Plus, version 4.2 built 1219, has a security loophole, which stems from the inadequate validation of the Authorization Heads by the Web Service Accreditation Process, which may lead to spills over the fence and remote code implementation.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
贝尔金
Published
2025-08-30
Last Modified
2026-02-24
References
https://www.vulncheck.com/advisories/belkin-bulldog-plus-web-service-buffer-overflow https://www.fortiguard.com/encyclopedia/ips/17325/belkin-bulldog-plus-web-services-buffer-overflow https://www.exploit-db.com/exploits/8173 https://s3.belkin.com/support/dl/bulldogwindows.pdf https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ https://nvd.nist.gov/vuln/detail/CVE-2009-20009 https://access.redhat.com/security/cve/cve-2009-20009
Share on: