PT-2025-32361 · Belkin · Belkin F9K1009+1

Nich0Las · Published 2025-08-08 · Updated 2025-08-13 · CVE-2025-8730

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Belkin F9K1009 versions 2.00.04 through 2.00.09 Belkin F9K1010 versions 2.00.04 through 2.00.09

Description A critical issue exists in the Web Interface component due to hard-coded credentials. This allows for remote attacks. The exploit has been publicly disclosed. The vendor was notified but did not respond.

Recommendations Belkin F9K1009 version 2.00.04: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Belkin F9K1009 version 2.00.05: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Belkin F9K1009 version 2.00.06: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Belkin F9K1009 version 2.00.07: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Belkin F9K1009 version 2.00.08: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Belkin F9K1009 version 2.00.09: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Belkin F9K1010 version 2.00.04: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Belkin F9K1010 version 2.00.05: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Belkin F9K1010 version 2.00.06: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Belkin F9K1010 version 2.00.07: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Belkin F9K1010 version 2.00.08: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Belkin F9K1010 version 2.00.09: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-259

CWE-798

Related Identifiers

CVE-2025-8730

Affected Products

Belkin F9K1009

Belkin F9K1010

References · 16

• 🔥 https://github.com/Nicholas-wei/bug-discovery/blob/main/belkin/F9K1010_WW_2.00.04/belkin_F9K1010_WW_2.00.04_hardcoded_credential.pdf · Exploit
• 🔥 https://exploit-db.com/exploits/52407 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8730 · Security Note
• https://github.com/Nicholas-wei/bug-discovery/blob/main/belkin/F9K1009_WW_2.00.09/belkin%20F9K1009_WW_2.00.09_hardcoded_credential.pdf · Note
• https://twitter.com/byte_reaper/status/1953945919529136199 · Twitter Post
• https://vuldb.com/?submit.621760 · Note
• https://twitter.com/CveFindCom/status/1953836102806044873 · Twitter Post
• https://twitter.com/autumn_good_35/status/1955260321104376064 · Twitter Post
• https://vuldb.com/?submit.621747 · Note
• https://twitter.com/offseq/status/1954105495393853928 · Twitter Post
• https://twitter.com/cracbot/status/1955585189591011443 · Twitter Post
• https://vuldb.com/?id.319226 · Note
• https://twitter.com/CVEnew/status/1953830783493259351 · Twitter Post
• https://t.me/CVEtracker/29507 · Telegram Post
• https://vuldb.com/?ctiid.319226 · Note