CVE-2025-7088

The CVE-2025-7088 entry concerns Belkin F9K1122 (version 1.00.33) and a vulnerability in the webs component’s formPPPoESetup function where abusing the pppUserName parameter causes a stack-based buffer overflow in /goform/formPPPoESetup. Multiple sources confirm remote exploitation with a publicl...

CVE-2025-7088 Belkin F9K1122 webs formPPPoESetup stack-based overflow

A vulnerability, which was classified as critical, was found in Belkin F9K1122 1.00.33. This affects the function formPPPoESetup of the file /goform/formPPPoESetup of the component webs. The manipulation of the argument pppUserName leads to stack-based buffer overflow. It is possible to initiate...