This vulnerability affects the Belkin F9K1015 router firmware version 1.00.10 in the formCrossBandSwitch function located in /goform/formCrossBandSwitch. A remote attacker can trigger a stack-based buffer overflow by manipulating the webpage argument. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor has not issued a patch or advisory, and the exploit has been publicly released, increasing the risk of exploitation.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device. The attacker can remotely trigger the buffer overflow without authentication or user interaction, potentially compromising the device's confidentiality, integrity, and availability. Given the public availability of exploit code and lack of vendor response, affected devices remain at significant risk.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded or provided guidance, users should consider isolating the affected device from untrusted networks and restricting remote access to the management interface as temporary mitigations. Monitor for any future vendor advisories or firmware updates addressing this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.