Description
A vulnerability was determined in Belkin F9K1015 1.00.10. Impacted is an unknown function of the file /goform/formSetWanStatic. Executing a manipulation of the argument m_wan_ipaddr can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
belkin: f9k1015 firmware; belkin: f9k1015
References7
- github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formSetWa… ExploitThird Party Advisory
- github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formSetWa… ExploitThird Party Advisory
- github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formSetWa… ExploitThird Party Advisory
- github.com/panda666-888/vuls/blob/main/belkin/f9k1015/formSetWa… ExploitThird Party Advisory
- vuldb.com/?ctiid.327179 Permissions RequiredVDB Entry
- vuldb.com/?id.327179 Third Party AdvisoryVDB Entry
- vuldb.com/?submit.661302 Third Party AdvisoryVDB Entry
Metrics
- CVSS 3.1
-
8.8
HIGH
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 4.0
-
2.1
LOW
Score source: CNA
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 7% percentile: 94 · as of 9 November 2026
- CWE
- CWE-74CWE-77
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.