CVE-2025-8730CWE-259CWE-798

Belkin F9K1009/F9K1010 Web Interface hard-coded credentials

Critical · published August 8, 2025

CVSS v4.0
9.3
EPSS
4%
Percentile
89.2
In the wild
Unconfirmed
What it is

🔥 Here’s a wild ride: Belkin routers F9K1009 and F9K1010 are leaving the door wide open with hard-coded credentials just waiting for mischief! Think of your router as a hotel front desk with a master key. If someone gets their hands on that key, they can access every guest room without permission — a terrifying thought! An attacker could waltz right in and take control of your network — snooping on traffic, stealing sensitive data, or even hijacking devices connected to your Wi-Fi. With the potential for remote exploitation and the vendor's silence, this vulnerability is absolutely devastating!

Put simply

Think of your router as a hotel front desk with a master key. If someone gets their hands on that key, they can access every guest room without permission — a terrifying thought! This vulnerability in the web interface of Belkin F9K1009 and F9K1010 routers exposes hard-coded credentials, allowing attackers to bypass authentication and gain unauthorized access remotely.

What to do

An attacker could waltz right in and take control of your network — snooping on traffic, stealing sensitive data, or even hijacking devices connected to your Wi-Fi. With the potential for remote exploitation and the vendor's silence, this vulnerability is absolutely devastating! Immediately patch your router firmware to versions beyond 2.00.09. If you can’t update, consider changing your router’s default settings and network credentials to bolster security against this vulnerability. Stay vigilant! You've got this! With these steps, you can secure your network and keep those digital baddies at bay! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.03529 · 89.2th percentile
Weaknesses
CWE-259 · Use of Hard-coded Password; CWE-798 · Use of Hard-coded Credentials
Published
2025-08-08T14:32Z
EPSS history
Timeline
  • 08 AUG 14:32Z
    Belkin F9K1009/F9K1010 Web Interface hard-coded credentials
    cvelistv5