CVE-2025-7083mediumobserved exploitationCWE-77CWE-78

CVE-2025-7083: medium-severity vulnerability in Belkin F9K1122

Belkin F9K1122 webs mp os command injection

Published · Updated

Follow this CVE+ Monitor F9K1122

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

47Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendcvss 5.3epss 47%
from disclosure to weapon
Published on NVDJul 6
VulnCheck+114d
A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. This affects the function mp of the file /goform/mp of the component webs. The manipulation of the argument command leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
Belkin · F9K1122
Related CVEs — Belkin F9K1122

In the same product, most dangerous first.

CVE-2025-7081MEDIUMBelkin F9K1122 webs formSetWanStatic os command injectionEPSS 20.4%CVE-2025-7082MEDIUMBelkin F9K1122 webs formBSSetSitesurvey os command injectionEPSS 17.5%CVE-2025-7088HIGHBelkin F9K1122 webs formPPPoESetup stack-based overflowEPSS 14.1%CVE-2025-7087HIGHBelkin F9K1122 webs formL2TPSetup stack-based overflowEPSS 13.7%CVE-2025-7091HIGHBelkin F9K1122 webs formWlanMP stack-based overflowEPSS 7.9%CVE-2025-7093HIGHBelkin F9K1122 webs formSetLanguage stack-based overflowEPSS 6.9%