CVE-2008-0403

NONECVSS 0.0Weaponized
0.0
EchelonGraph verdictMonitorLow exploitation likelihood right now — keep watching.
  • No confirmed exploitation signals yet
CISA-KEV: Not listedEPSS: 3%CVSS: Exploit: NoneExposed: 0

No vendor fix yet — apply a workaround or compensating control (WAF / firewall / segmentation) and watch for a patch.

The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and modify configuration via a direct request to SaveCfgFile.cgi.

CVSS v3
EG Score
0.0(none)
EPSS
82.9%
KEV
Not listed

Published

January 23, 2008

Last Modified

April 23, 2026

Weakness Classification(1)

MITRE Common Weakness Enumeration — the root-cause categories this CVE belongs to.

Publicly available exploits

(1 reference)

Working exploit code is in the public domain (1 Exploit-DB entry). Defenders should treat patch urgency accordingly — public PoCs typically lead to mass-exploitation within 24-72 hours.

  • Exploit-DBEDB-4941✓ verified
    First seen Jan 20, 2008

    Belkin F5D9230-4 Wireless G Plus MIMO Router - Authentication Bypass

    Open source ↗

Frequently asked(4)

What is CVE-2008-0403?
CVE-2008-0403 is a none vulnerability published on January 23, 2008. The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and modify configuration via a direct request to SaveCfgFile.cgi.
When was CVE-2008-0403 disclosed?
CVE-2008-0403 was first published in the National Vulnerability Database on January 23, 2008, with the most recent update on April 23, 2026. EchelonGraph re-ingests CVE updates from NVD on a 2-hour cycle, so this page reflects the latest published state.
Is CVE-2008-0403 actively exploited?
CVE-2008-0403 is not currently on CISA's Known Exploited Vulnerabilities catalog. FIRST EPSS estimates a 82.9% percentile likelihood of exploitation in the next 30 days — higher percentiles indicate greater predicted risk.
How do I remediate CVE-2008-0403?
Patch to the fixed version published by the affected vendor. Where vendor advisories exist for CVE-2008-0403, EchelonGraph cross-links them in the Vendor Advisories panel below — those typically contain the canonical remediation steps, fixed version numbers, and any vendor-specific mitigations.

Dependency Blast Radius

Explore the affected products and dependency analysis for CVE-2008-0403

Explore →

Is Your Infrastructure Affected by CVE-2008-0403?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.