CVE-2009-20009
Critical
Description
Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properly validate the input length before copying it into a fixed-size buffer, resulting in memory corruption and potential remote code execution. Exploitation requires network access and does not require prior authentication.
SeverityCritical
CVSS9.3
Exploit probability—
ProductBulldog Plus UPS Monitoring Software
PublishedAug 30, 2025
First seenAug 30, 2025
Weakness typeCWE-121CWE-121
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Belkin International, Inc. Bulldog Plus UPS Monitoring Software | v ≤ 4.0.2 build 1219 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.