CVE-2025-11298

A vulnerability was determined in Belkin F9K1015 1.00.10. Impacted is an unknown function of the file /goform/formSetWanStatic. Executing a manipulation of the argument mwanipaddr can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and m...

CVE-2025-11294

A vulnerability was detected in Belkin F9K1015 1.00.10. Affected by this issue is some unknown functionality of the file /goform/formL2TPSetup. The manipulation of the argument L2TPUserName results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used...

PT-2025-40813

Name of the Vulnerable Software and Affected Versions Belkin F9K1015 version 1.00.10 Description A buffer overflow issue exists in Belkin F9K1015 version 1.00.10 due to manipulation of the webpage argument when processing the /goform/formSetLanguage file. This allows for remote exploitation. An...

CVE-2025-7087

A vulnerability classified as critical was found in Belkin F9K1122 1.00.33. Affected by this vulnerability is the function formL2TPSetup of the file /goform/formL2TPSetup of the component webs. The manipulation of the argument L2TPUserName leads to stack-based buffer overflow. The attack can be...

CVE-2025-7084

A vulnerability was found in Belkin F9K1122 1.00.33. It has been declared as critical. This vulnerability affects the function formWpsStart of the file /goform/formWpsStart of the component webs. The manipulation of the argument pinCode leads to stack-based buffer overflow. The attack can be...

CVE-2025-7090

Belkin F9K1122 (version 1.00.33) is affected by CVE-2025-7090. The vulnerability exists in the webs component within the function formConnectionSetting, where manipulating the argument max_Conn/timeOut leads to a stack-based buffer overflow. The issue can be triggered remotely; exploitation has b...

CVE-2025-7087

CVE-2025-7087 affects Belkin F9K1122 (firmware 1.00.33). The vulnerability is in webs: formL2TPSetup, where manipulating the L2TPUserName parameter leads to a stack-based buffer overflow in /goform/formL2TPSetup. This allows remote exploitation, with public disclosure and PoC references in the so...