CVE-2025-8730— Belkin F9K1009/F9K1010 Web Interface hard-coded credentials
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-8730
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Belkin F9K1009/F9K1010 Web Interface hard-coded credentials
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability was found in Belkin F9K1009 and F9K1010 2.00.04/2.00.09 and classified as critical. Affected by this issue is some unknown functionality of the component Web Interface. The manipulation leads to hard-coded credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用硬编码的凭证
Source: NVD (National Vulnerability Database)
Vulnerability Title
Belkin F9K1009和Belkin F9K1010 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Belkin F9K1009和Belkin F9K1010都是加拿大Belkin公司的一款无线路由器。 Belkin F9K1009和Belkin F9K1010 2.00.04版本、2.00.09版本存在安全漏洞，该漏洞源于存在硬编码凭证问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
II. Public POCs for CVE-2025-8730
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Exploit demonstrating an authentication bypass vulnerability in the web interface of Belkin F9K1009 and F9K1010 routers. | https://github.com/byteReaper77/CVE-2025-8730 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-8730
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: Belkin
- CVE-2026-5629
Belkin F9K1015 formSetFirewall stack-based overflow - CVE-2026-5628
Belkin F9K1015 Setting formSetSystemSettings stack-based ove - CVE-2026-5614
Belkin F9K1015 formSetPassword stack-based overflow - CVE-2026-5613
Belkin F9K1015 formReboot stack-based overflow - CVE-2026-5612
Belkin F9K1015 formWlEncrypt stack-based overflow
Same weakness: CWE-798
- CVE-2026-7414
Hardcoded credentials in Yarbo robot firmware - CVE-2026-8032
PicoTronica e-Clinic Healthcare System ECHS echs.js hard-cod - CVE-2026-32834
Easy PayPal Events & Tickets 1.3 Authentication Bypass via Q - CVE-2026-42376
D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials - CVE-2026-42375
D-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials
V. Comments for CVE-2025-8730
No comments yet