CVE-2025-11293
Published: 05 October 2025
Description
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
Security Summary
CVE-2025-11293 is a buffer overflow vulnerability affecting the Belkin F9K1015 router running firmware version 1.00.10. The issue resides in an unknown functionality exposed via the /goform/formConnectionSetting endpoint, where manipulation of the max_Conn argument triggers the overflow. This flaw, classified under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-120 (Buffer Copy without Checking Size of Input), carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high severity due to its potential for significant impact.
The vulnerability can be exploited remotely by an attacker with low privileges, such as an authenticated user on the device, requiring no user interaction and low attack complexity. Successful exploitation allows the attacker to achieve high levels of confidentiality, integrity, and availability impacts, potentially enabling arbitrary code execution, data compromise, or denial of service on the affected router.
Advisories from VulDB and a public GitHub repository detail the vulnerability, including a proof-of-concept exploit targeting the formConnectionSetting endpoint. No patches or vendor responses are available, as Belkin was contacted prior to disclosure but did not reply. Security practitioners should isolate affected devices and monitor for exploitation attempts using the disclosed POC.
The exploit has been publicly disclosed and is available for use, increasing the risk of immediate attacks against unpatched Belkin F9K1015 routers.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise Techniques
Why these techniques?
Buffer overflow in the remotely accessible web interface (/goform/formConnectionSetting) of the Belkin F9K1015 router enables exploitation of a public-facing application, with public PoC available.