CVE-2025-11293

A security vulnerability has been detected in Belkin F9K1015 1.00.10. Affected by this vulnerability is an unknown functionality of the file /goform/formConnectionSetting. The manipulation of the argument max_Conn leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:belkin:f9k1015_firmware:1.00.10:*:*:*:*:*:*:*
cpe:2.3:h:belkin:f9k1015:-:*:*:*:*:*:*:*

History

07 Oct 2025, 17:27

Type Values Removed Values Added
CPE cpe:2.3:h:belkin:f9k1015:-:*:*:*:*:*:*:*
cpe:2.3:o:belkin:f9k1015_firmware:1.00.10:*:*:*:*:*:*:*
First Time Belkin f9k1015 Firmware
Belkin
Belkin f9k1015
References () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formConnectionSetting.md - () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formConnectionSetting.md - Exploit, Third Party Advisory
References () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formConnectionSetting.md#poc - () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formConnectionSetting.md#poc - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.327174 - () https://vuldb.com/?ctiid.327174 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.327174 - () https://vuldb.com/?id.327174 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.661296 - () https://vuldb.com/?submit.661296 - Third Party Advisory, VDB Entry

06 Oct 2025, 19:15

Type Values Removed Values Added
References () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formConnectionSetting.md - () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formConnectionSetting.md -
References () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formConnectionSetting.md#poc - () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formConnectionSetting.md#poc -

05 Oct 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-10-05 16:15

Updated : 2025-10-07 17:27


NVD link : CVE-2025-11293

Mitre link : CVE-2025-11293

CVE.ORG link : CVE-2025-11293


JSON object : View

Products Affected

belkin

  • f9k1015
  • f9k1015_firmware
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')