CVE-2025-7088: Belkin F9K1122 webs formPPPoESetup stack-based overflow
A vulnerability, which was classified as critical, was found in Belkin F9K1122 1.00.33. This affects the function formPPPoESetup of the file /goform/formPPPoESetup of the component webs. The manipulation of the argument pppUserName leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7088?
CVE-2025-7088 is classified as a critical vulnerability.
How does CVE-2025-7088 affect users?
CVE-2025-7088 impacts the Belkin F9K1122 router by allowing the manipulation of the pppUserName argument leading to a stack-based buffer overflow.
How do I fix CVE-2025-7088?
To fix CVE-2025-7088, users should update the firmware of their Belkin F9K1122 to the latest version provided by the manufacturer.
What components are affected by CVE-2025-7088?
CVE-2025-7088 affects the webs component, specifically the formPPPoESetup function in the Belkin F9K1122 router.
Is CVE-2025-7088 easily exploitable?
Yes, CVE-2025-7088 can be easily exploited due to its stack-based buffer overflow nature, allowing attackers to craft specific inputs.