Skip to content
Noroxi

Belkin records

90 published records for vendor belkin.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 2.2%
Pre-auth RCE
8
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 25
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

90 records
  • CVE-2019-12780
    60This week

    The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo UPnP API via the SmartDevURL argument to the SetSmartDevInfo action.

    CriticalCVSS 9.8WeaponizedEPSS 71%

    belkin · crock-pot smart slow cooker with wemo firmwareJun 10, 2019

  • CVE-2014-1635
    60This week

    Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute

    CriticalCVSS 10.0WeaponizedEPSS 67%

    belkin · n750 wireless router firmwareNov 12, 2014

  • CVE-2018-1143
    55Plan

    A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP reque

    CriticalCVSS 9.8No exploitEPSS 54%

    belkin · n750 firmwareApr 19, 2018

  • CVE-2018-1145
    46Plan

    A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP reques

    CriticalCVSS 9.8No exploitEPSS 24%

    belkin · n750 firmwareApr 19, 2018

  • CVE-2014-2962
    45Plan

    Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows rem

    HighCVSS 7.8Proof of conceptEPSS 47%

    belkin · n150 f9k1009 firmwareJun 19, 2014

  • CVE-2013-2748
    43Plan

    Belkin Wemo Switch before WeMo_US_2.00.2176.PVT could allow remote attackers to upload arbitrary files onto the system.

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    belkin · wemo switch firmwareJan 28, 2020

  • CVE-2018-1144
    41Plan

    A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP reque

    CriticalCVSS 9.8No exploitEPSS 6%

    belkin · n750 firmwareApr 19, 2018

  • CVE-2008-1244
    41Plan

    cgi-bin/setup_dns.exe on the Belkin F5D7230-4 router with firmware 9.01.10 does not require authentication, which allows remote attackers to

    CriticalCVSS 10.0Proof of conceptEPSS 4%

    belkin · f5d7230-4Mar 10, 2008

  • CVE-2008-1242
    41Plan

    The control panel on the Belkin F5D7230-4 router with firmware 9.01.10 maintains authentication state by IP address, which allows remote att

    CriticalCVSS 10.0Proof of conceptEPSS 4%

    belkin · f5d7230-4Mar 10, 2008

  • CVE-2008-7115
    41Plan

    The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authen

    CriticalCVSS 10.0Proof of conceptEPSS 4%

    belkin · f5d7632-4Aug 28, 2009

  • CVE-2013-6952
    41Plan

    The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attackers to spoof firmware u

    CriticalCVSS 10.0No exploitEPSS 3%

    belkin · wemo home automation firmwareFeb 22, 2014

  • CVE-2018-6692
    41Plan

    Wemo Insight Smart Plug - Remote Code Execution vulnerability

    CriticalCVSS 10.0No exploitEPSS 3%

    belkin · wemo insight smart plug firmwareAug 21, 2018

  • CVE-2013-3091
    40Plan

    An Authentication Bypass vulnerability in Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication using "Javascript

    CriticalCVSS 9.8No exploitEPSS 3%

    belkin · n300 firmwareFeb 7, 2020

  • CVE-2022-30105
    40Plan

    In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible before and after configuring the device, exh

    CriticalCVSS 9.8No exploitEPSS 2%

    belkin · n300 firmwareMay 18, 2022

  • CVE-2013-7173
    40Plan

    Belkin n750 routers have a buffer overflow.

    CriticalCVSS 9.8No exploitEPSS 1%

    belkin · n750 firmwareFeb 13, 2020

  • CVE-2013-3088
    40Plan

    Belkin N900 router (F9K1104v1) contains an Authentication Bypass using "Javascript debugging".

    CriticalCVSS 9.8No exploitEPSS 1%

    belkin · n900 firmwareDec 26, 2019

  • CVE-2013-3085
    40Plan

    An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2.

    CriticalCVSS 9.8No exploitEPSS 1%

    belkin · f5d8236-4 firmwareDec 26, 2019

  • CVE-2020-26561
    39Monitor

    Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have a stack-based buffer overflow vulnerability because of sprintf in create_dir in

    HighCVSS 8.8No exploitEPSS 11%

    belkin · linksys wrt 160nl firmwareOct 23, 2020

  • CVE-2023-27217
    39Monitor

    A stack-based buffer overflow in the ChangeFriendlyName() function of Belkin Smart Outlet V2 F7c063 firmware_2.00.11420.OWRT.PVT_SNSV2 allow

    CriticalCVSS 9.8No exploitEPSS 0%

    belkin · f7c063 firmwareMay 17, 2023

  • CVE-2018-1146
    38Monitor

    A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.c

    HighCVSS 7.5No exploitEPSS 28%

    belkin · n750 firmwareApr 19, 2018

  • CVE-2013-6949
    38Monitor

    The Belkin WeMo Home Automation firmware before 3949 does not properly use the STUN and TURN protocols, which allows remote attackers to hij

    CriticalCVSS 9.3No exploitEPSS 1%

    belkin · wemo home automation firmwareFeb 22, 2014

  • CVE-2015-5536
    37Monitor

    Belkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10 allows remote authenticated users to execute arbitrary commands via

    CriticalCVSS 9.0No exploitEPSS 4%

    belkin · n300 dual-band wi-fi range extender firmwareAug 13, 2015

  • CVE-2021-25310
    36Monitor

    The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated attackers to execute

    HighCVSS 8.8No exploitEPSS 4%

    belkin · linksys wrt160nl firmwareFeb 2, 2021

  • CVE-2013-3092
    34Monitor

    The Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication and gain privileges via vectors related to incorrect val

    HighCVSS 8.3No exploitEPSS 2%

    belkin · n300 firmwareSep 29, 2014

  • CVE-2025-7088
    33Monitor

    Belkin F9K1122 webs formPPPoESetup stack-based overflow

    HighCVSS 7.4No exploitEPSS 13%

    belkin · f9k1122 firmwareJul 6, 2025