This vulnerability affects Belkin F9K1015 firmware version 1.00.10 and involves a stack-based buffer overflow in the formCrossBandSwitch function of the /goform/formCrossBandSwitch endpoint. An attacker can remotely trigger this overflow by sending a specially crafted argument named webpage, leading to potential arbitrary code execution or denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor has not issued any patch or official fix, and no known exploits in the wild have been reported yet.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected device, potentially leading to full compromise of the router. This could result in unauthorized control, disruption of network services, or further attacks on connected networks. The high CVSS score reflects the significant impact on confidentiality, integrity, and availability.

As of the current information, no official patch or remediation is available from the vendor. Users should monitor for any future advisories from Belkin regarding this vulnerability. Until a fix is released, consider isolating the affected device from untrusted networks and restricting remote access to the management interface to trusted sources only. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.