This vulnerability involves a stack-based buffer overflow in the formWlanSetup function of the Belkin F9K1122 router firmware version 1.00.33. By manipulating the 'webpage' argument sent to the /goform/formWlanSetup endpoint, a remote attacker can overflow a buffer on the stack, potentially leading to arbitrary code execution or denial of service. The vulnerability is remotely exploitable without user interaction and has a CVSS 4.0 score of 8.7, indicating high severity. Although exploit code is publicly available, there is no known vendor patch or official remediation at this time.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. Given the high CVSS score and the nature of stack-based buffer overflows, this could compromise the router’s integrity and availability. The vulnerability requires no user interaction and can be triggered remotely, increasing its risk. However, there are no confirmed reports of exploitation in the wild.

No official patch or remediation guidance is currently available from the vendor. Users should monitor for any future advisories from Belkin regarding this vulnerability. Until a fix is released, affected devices should be isolated from untrusted networks or replaced with unaffected hardware if possible. Network-level protections such as firewall rules blocking access to the vulnerable endpoint may reduce exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.