PT-2025-28079 · Belkin · Belkin F9K1122

Pjqwudi

·

Published

2025-06-25

·

Updated

2025-07-11

·

CVE-2025-7085

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33
Description: A critical issue affects the function formiNICWpsStart of the file /goform/formiNICWpsStart in the webs component. The manipulation of the pinCode argument leads to a stack-based buffer overflow. This issue can be exploited remotely. The vendor was contacted about the disclosure but did not respond.
Recommendations: For Belkin F9K1122 version 1.00.33, as a temporary workaround, consider disabling the formiNICWpsStart function until a patch is available. Restrict access to the webs component to minimize the risk of exploitation. Avoid using the pinCode argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121CWE-119

Related Identifiers

BDU:2025-08097
CVE-2025-7085

Affected Products

Belkin F9K1122