CVE-2025-11301: high-severity vulnerability in Belkin F9K1015
Belkin F9K1015 formWlanSetupWPS buffer overflow
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 1.1%
A weakness has been identified in Belkin F9K1015 1.00.10. This affects an unknown function of the file /goform/formWlanSetupWPS. This manipulation of the argument webpage causes buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Belkin · F9K1015Related CVEs — Belkin F9K1015
In the same product, most dangerous first.
CVE-2025-11303MEDIUMBelkin F9K1015 mp command injectionEPSS 6.8%CVE-2025-11298MEDIUMBelkin F9K1015 formSetWanStatic command injectionEPSS 6.8%CVE-2025-11292MEDIUMBelkin F9K1015 formBSSetSitesurvey command injectionEPSS 6.8%CVE-2025-11294HIGHBelkin F9K1015 formL2TPSetup buffer overflowEPSS 1.3%CVE-2025-11299HIGHBelkin F9K1015 formWanTcpipSetup buffer overflowEPSS 1.1%CVE-2025-11296HIGHBelkin F9K1015 formPPTPSetup buffer overflowEPSS 1.1%