CVEvulnerability
CVE-2025-9379
8.6 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-08-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 8.6 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 8.3 HIGH — AV:N/AC:L/Au:M/C:C/I:C/A:C
- Weaknesses
- CWE-345
Description
A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Related
Weakness · CWE (1)
- CWE-345 Insufficient Verification of Data Authenticity weakness
References
- https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Belkin/AX1800.md github.com
- https://vuldb.com/?ctiid.321212 vuldb.com
- https://vuldb.com/?id.321212 vuldb.com
- https://vuldb.com/?submit.628641 vuldb.com