CVE-2025-9379 Belkin AX1800 Firmware Update data authenticity
Remote attackers can bypass firmware update authenticity checks on Belkin AX1800 routers, potentially installing malicious firmware.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-9379?
CVE-2025-9379 is a high-severity vulnerability in Belkin AX1800, published on 24 Aug 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Weakness: CWE-345
Which versions are affected by CVE-2025-9379?
How do I fix CVE-2025-9379?
No fix has been published for CVE-2025-9379 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-9379 being exploited?
There is no known exploitation of CVE-2025-9379 in the wild and no public exploit code.
Sources
Also known as GHSA-h8vm-xjch-3jwx.