EUVD-2025-20149Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. This vulnerability affects the function formWlanSetupWPS of the file /goform/formWlanSetupWPS of the component webs. The manipulation of the argument wps_enrolee_pin/webpage leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Analysis
A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. This vulnerability affects the function formWlanSetupWPS of the file /goform/formWlanSetupWPS of the component webs. The manipulation of the argument wps_enrolee_pin/webpage leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Technical ContextAI
A buffer overflow occurs when data written to a buffer exceeds its allocated size, potentially overwriting adjacent memory and corrupting program state.
RemediationAI
Use memory-safe languages or bounds-checked functions. Enable ASLR, DEP/NX, and stack canaries. Apply vendor patches promptly.
More in F9k1122 Firmware
View allA vulnerability was found in Belkin F9K1122 1.00.33. It has been declared as critical. This vulnerability affects the fu
A vulnerability was found in Belkin F9K1122 1.00.33. It has been declared as critical. Affected by this vulnerability is
A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. Affected is the function formWl
A vulnerability, which was classified as critical, has been found in Belkin F9K1122 1.00.33. Affected by this issue is t
A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. This issue affects the function formWanT
A vulnerability, which was classified as critical, was found in Belkin F9K1122 1.00.33. This affects the function formPP
A vulnerability classified as critical was found in Belkin F9K1122 1.00.33. Affected by this vulnerability is the functi
A vulnerability classified as critical has been found in Belkin F9K1122 1.00.33. Affected is the function formPPTPSetup
A vulnerability was found in Belkin F9K1122 1.00.33. It has been rated as critical. This issue affects the function form
A vulnerability was found in Belkin F9K1122 1.00.33. It has been rated as critical. Affected by this issue is the functi
Remote command injection in Belkin F9K1122 firmware version 1.00.33 allows authenticated low-privilege attackers to exec
OS command injection in Belkin F9K1122 firmware version 1.00.33 allows remote authenticated attackers to execute arbitra
Same weakness CWE-119 – Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today