Belkin F9K1015 formPPPoESetup buffer overflow_CVE-2025-11295

8.7 / 10

HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Description

A flaw has been found in Belkin F9K1015 1.00.10. This affects an unknown part of the file /goform/formPPPoESetup. This manipulation of the argument pppUserName causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Basic Information

ID CVE-2025-11295

Source VulDB

Published Oct 5, 2025 at 16:32

Affected Product

Vendor Belkin

Product F9K1015

Version 1.00.10

Affected Versions Belkin F9K1015 1.00.10

CWE Classification

CWE-120 CWE-119

References

{
    "lastseen": "",
    "description": "A flaw has been found in Belkin F9K1015 1.00.10. This affects an unknown part of the file /goform/formPPPoESetup. This manipulation of the argument pppUserName causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
    "published": "2025-10-05T16:32:06.030Z",
    "modified": "2025-10-05T16:32:06.030Z",
    "type": "cve",
    "title": "Belkin F9K1015 formPPPoESetup buffer overflow",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.327176\nhttps://vuldb.com/?ctiid.327176\nhttps://vuldb.com/?submit.661299\nhttps://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formPPPoESetup.md\nhttps://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formPPPoESetup.md#poc",
    "id": "CVE-2025-11295",
    "bulletinFamily": "",
    "cwe": [
        "CWE-120",
        "CWE-119"
    ],
    "cvelist": null,
    "sourceData": "Belkin F9K1015 1.00.10",
    "sourceHref": "",
    "cvss": {
        "score": 8.7,
        "severity": "HIGH",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "F9K1015",
    "version": "1.00.10",
    "vendor": "Belkin",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}