CVE-2025-11294

A vulnerability was detected in Belkin F9K1015 1.00.10, involving command injection in /goform/mp. Manipulation of the command argument allows remote command execution. The exploit is public and may be used.

A vulnerability was determined in Belkin F9K1015 1.00.10, involving command injection in /goform/formSetWanStatic. Manipulation of m_wan_ipaddr allows remote command execution. The exploit is publicly disclosed.

A weakness was identified in Belkin F9K1015 1.00.10, involving command injection in /goform/formBSSetSitesurvey. Manipulation of wan_ipaddr allows remote command execution. The exploit is publicly available.

A security vulnerability has been detected in Belkin F9K1015 1.00.10. This vulnerability affects the function formSetSystemSettings in the file /goform/formSetSystemSettings, where manipulation of the webpage argument leads to a stack-based buffer overflow. Remote exploitation is possible, and the exploit has been publicly disclosed. The vendor did not respond.

A stack-based buffer overflow vulnerability was identified in the Belkin F9K1015 router version 1.00.10 in the formReboot function of the /goform/formReboot file. The attack can be performed remotely by manipulating the webpage argument. The exploit is publicly available.

A stack-based buffer overflow vulnerability was found in the Belkin F9K1015 router version 1.00.10 in the formWlEncrypt function of the /goform/formWlEncrypt file. The attack can be performed remotely by manipulating the webpage argument. The exploit has been publicly disclosed.

A stack-based buffer overflow vulnerability was identified in the Belkin F9K1015 router version 1.00.10 in the formCrossBandSwitch function of the /goform/formCrossBandSwitch file. The attack can be performed remotely by manipulating the webpage argument. The exploit has been made public.

A stack-based buffer overflow vulnerability was found in the Belkin F9K1015 router version 1.00.10 in the formWISP5G function of the /goform/formWISP5G file. The attack can be performed remotely by manipulating the webpage argument. The exploit has been publicly disclosed.

A security vulnerability has been detected in Belkin F9K1015 1.00.10. This impacts an unknown function in /goform/formWpsStart, where manipulation of the pinCode argument leads to buffer overflow. The attack can be launched remotely, and the exploit has been disclosed publicly.

A vulnerability was identified in Belkin F9K1015 1.00.10. The affected element is an unknown function in /goform/formWanTcpipSetup, where manipulation of the pppUserName argument leads to buffer overflow. The attack can be launched remotely, and the exploit is publicly available.