vulnwire
9.3crit

CVE-2009-200091 exploit

Belkin Bulldog Plus Web Service Buffer Overflow

Published 14 mo ago · modified 36 d ago · JSON

CVSS
9.3
v4.0 · CNA
CISA KEV
No
not known exploited
EPSS
1.8%
percentile 79%
Public exploits
1
Metasploit

Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properly validate the input length before copying it into a fixed-size buffer, resulting in memory corruption and potential remote code execution. Exploitation requires network access and does not require prior authentication.

CISA SSVC assessment

Exploitation
Proof of concept public
Automatable
yes
Technical impact
total
Assessed
14 mo ago

Exploit prediction (EPSS)

1.82% probability of exploitation in the next 30 days, higher than 79% of all scored CVEs.

Exploits and detections

CVSS scores

Assigned byVersionScoreVector
CNA4.09.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CNA4.09.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Belkin International, Inc. Bulldog Plus UPS Monitoring Software

Classification

Weakness
  • CWE-121 Stack-based Buffer Overflow

References

  • raw.githubusercontent.com /rapid7/metasploit-framework/master/modules/exploits/windows/http/belkin_bulldog.rb · exploit
  • exploit-db.com /exploits/8173 · exploit
  • fortiguard.com /encyclopedia/ips/17325/belkin-bulldog-plus-web-services-buffer-overflow · third-party-advisory
  • s3.belkin.com /support/dl/bulldogwindows.pdf · product
  • vulncheck.com /advisories/belkin-bulldog-plus-web-service-buffer-overflow · third-party-advisory

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.