CVE-2025-7089: Belkin F9K1122 webs formWanTcpipSetup stack-based overflow
A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. This issue affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component webs. The manipulation of the argument pppUserName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7089?
CVE-2025-7089 is classified as critical due to its potential for stack-based buffer overflow.
How do I fix CVE-2025-7089?
To fix CVE-2025-7089, update the Belkin F9K1122 device firmware to the latest version provided by the vendor.
What component is affected by CVE-2025-7089?
CVE-2025-7089 affects the webs component, specifically the function formWanTcpipSetup in the file /goform/formWanTcpipSetup.
What devices are impacted by CVE-2025-7089?
The vulnerability CVE-2025-7089 impacts the Belkin F9K1122 router.
What attack vector is associated with CVE-2025-7089?
CVE-2025-7089 can be exploited through manipulation of the pppUserName argument, leading to a stack-based buffer overflow.