CVE-2025-7087

A vulnerability classified as critical was found in Belkin F9K1122 1.00.33. Affected by this vulnerability is the function formL2TPSetup of the file /goform/formL2TPSetup of the component webs. The manipulation of the argument L2TPUserName leads to stack-based buffer overflow. The attack can be...

CVE-2025-7087

CVE-2025-7087 affects Belkin F9K1122 (firmware 1.00.33). The vulnerability is in webs: formL2TPSetup, where manipulating the L2TPUserName parameter leads to a stack-based buffer overflow in /goform/formL2TPSetup. This allows remote exploitation, with public disclosure and PoC references in the so...

CVE-2025-22906

RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN...

CVE-2025-22906

RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN...

CVE-2025-22906

RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN...

CVE-2025-22906

CVE-2025-22906 affects RE11S v1.11, where the L2TPUserName parameter at /goform/setWAN enables a command-injection vulnerability. CVSS 3.1 base score 9.8 (NETWORK, LOW attack complexity, NO user interaction, NONE privileges). The issue is documented with a vendor/product context (RE11S v1.11) and...