CVE-2025-7081: Belkin F9K1122 webs formSetWanStatic os command injection
A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this vulnerability is the function formSetWanStatic of the file /goform/formSetWanStatic of the component webs. The manipulation of the argument mwanipaddr/mwannetmask/mwangateway/mwanstaticdns1/mwanstaticdns2 is directly passed by the attacker/so we can control the mwanipaddr/mwannetmask/mwangateway/mwanstaticdns1/mwanstaticdns2 leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7081?
CVE-2025-7081 is classified as a critical severity vulnerability.
What products are affected by CVE-2025-7081?
CVE-2025-7081 affects the Belkin F9K1122 router.
How do I fix CVE-2025-7081?
To fix CVE-2025-7081, update the firmware of your Belkin F9K1122 router to the latest version.
What component is vulnerable in CVE-2025-7081?
The vulnerable component in CVE-2025-7081 is the 'formSetWanStatic' function in the webs component.
What are the risks associated with CVE-2025-7081?
Exploiting CVE-2025-7081 may lead to unauthorized access and manipulation of the network settings.