CVE-2025-7083mediumexplotación observadaCWE-77CWE-78

CVE-2025-7083: fallo de gravedad media en Belkin F9K1122

Belkin F9K1122 webs mp os command injection

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear F9K1122

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

47Vexday Risk Score

Prioriza la corrección. Ella explotación observada por VulnCheck.

ssvc Attendcvss 5.3epss 47%
de la publicación al arma
Publicada en NVD6 jul
VulnCheck+114d
A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. This affects the function mp of the file /goform/mp of the component webs. The manipulation of the argument command leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
Belkin · F9K1122
CVEs relacionadas — Belkin F9K1122

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-7081MEDIUMBelkin F9K1122 webs formSetWanStatic os command injectionEPSS 20.4%CVE-2025-7082MEDIUMBelkin F9K1122 webs formBSSetSitesurvey os command injectionEPSS 17.5%CVE-2025-7088HIGHBelkin F9K1122 webs formPPPoESetup stack-based overflowEPSS 14.1%CVE-2025-7087HIGHBelkin F9K1122 webs formL2TPSetup stack-based overflowEPSS 13.7%CVE-2025-7091HIGHBelkin F9K1122 webs formWlanMP stack-based overflowEPSS 7.9%CVE-2025-7093HIGHBelkin F9K1122 webs formSetLanguage stack-based overflowEPSS 6.9%