This vulnerability affects Belkin F9K1015 routers running firmware version 1.00.10. The flaw is a stack-based buffer overflow in the formWISP5G function, triggered by specially crafted input to the 'webpage' argument in the /goform/formWISP5G endpoint. Successful exploitation can lead to remote code execution or denial of service due to memory corruption. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor has not issued a patch or advisory, and no official remediation is currently available.

Exploitation of this vulnerability allows an unauthenticated remote attacker to cause a stack-based buffer overflow, potentially leading to remote code execution or denial of service on affected devices. The high CVSS score reflects the significant risk to confidentiality, integrity, and availability of the device and network traffic passing through it. Since the vendor has not provided a fix, affected devices remain vulnerable to attacks if exposed to untrusted networks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been provided by Belkin, users should limit exposure of the affected device to untrusted networks, disable remote management if enabled, and monitor for unusual activity. Consider replacing or isolating affected devices until a vendor patch or workaround is available.