CVE-2025-11301

A weakness has been identified in Belkin F9K1015 1.00.10. This affects an unknown function of the file /goform/formWlanSetupWPS. This manipulation of the argument webpage causes buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:belkin:f9k1015_firmware:1.00.10:*:*:*:*:*:*:*
cpe:2.3:h:belkin:f9k1015:-:*:*:*:*:*:*:*

History

07 Oct 2025, 17:16

Type Values Removed Values Added
References () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formWlanSetupWPS.md - () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formWlanSetupWPS.md - Exploit, Third Party Advisory
References () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formWlanSetupWPS.md#poc - () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formWlanSetupWPS.md#poc - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.327182 - () https://vuldb.com/?ctiid.327182 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.327182 - () https://vuldb.com/?id.327182 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.661305 - () https://vuldb.com/?submit.661305 - Third Party Advisory, VDB Entry
CPE cpe:2.3:h:belkin:f9k1015:-:*:*:*:*:*:*:*
cpe:2.3:o:belkin:f9k1015_firmware:1.00.10:*:*:*:*:*:*:*
First Time Belkin f9k1015 Firmware
Belkin
Belkin f9k1015

06 Oct 2025, 17:16

Type Values Removed Values Added
References () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formWlanSetupWPS.md - () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formWlanSetupWPS.md -
References () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formWlanSetupWPS.md#poc - () https://github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formWlanSetupWPS.md#poc -

05 Oct 2025, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-10-05 20:15

Updated : 2025-10-07 17:16


NVD link : CVE-2025-11301

Mitre link : CVE-2025-11301

CVE.ORG link : CVE-2025-11301


JSON object : View

Products Affected

belkin

  • f9k1015
  • f9k1015_firmware
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')