PT-2025-28087 · Belkin · Belkin F9K1122

Pjqwudi

·

Published

2025-06-25

·

Updated

2025-07-11

·

CVE-2025-7093

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33
Description: A critical vulnerability has been found, affecting the function formSetLanguage of the file /goform/formSetLanguage in the component webs. The manipulation of the argument webpage leads to a stack-based buffer overflow. This issue can be exploited remotely. The exploit has been publicly disclosed, and the vendor was notified but did not respond.
Recommendations: For Belkin F9K1122 version 1.00.33, as a temporary workaround, consider disabling the formSetLanguage function until a patch is available. Restrict access to the /goform/formSetLanguage endpoint to minimize the risk of exploitation. Avoid using the webpage argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121CWE-119

Related Identifiers

BDU:2025-08134
CVE-2025-7093

Affected Products

Belkin F9K1122