CVE-2025-7084: Belkin F9K1122 webs formWpsStart stack-based overflow
A vulnerability was found in Belkin F9K1122 1.00.33. It has been declared as critical. This vulnerability affects the function formWpsStart of the file /goform/formWpsStart of the component webs. The manipulation of the argument pinCode leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7084?
CVE-2025-7084 has been declared as critical due to its potential for exploitation.
What component of the Belkin F9K1122 is affected by CVE-2025-7084?
CVE-2025-7084 affects the function formWpsStart within the webs component of the device.
How does the buffer overflow occur in CVE-2025-7084?
The buffer overflow in CVE-2025-7084 occurs through the manipulation of the argument pinCode.
What are the potential impacts of exploiting CVE-2025-7084?
Exploiting CVE-2025-7084 could lead to unauthorized access or control over the Belkin F9K1122 device.
How do I fix CVE-2025-7084?
To fix CVE-2025-7084, update the Belkin F9K1122 to the latest firmware version provided by the vendor.