This vulnerability involves a stack-based buffer overflow in the formSetPassword function of the Belkin F9K1015 router firmware 1.00.10. The issue arises from improper validation of the 'webpage' argument passed to /goform/formSetPassword, enabling remote attackers to overflow the stack. The CVSS 4.0 base score is 8.7, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impacts on confidentiality, integrity, and availability. The vendor has not provided a patch or mitigation, and the exploit code is publicly available.

Successful exploitation can lead to remote code execution or denial of service on the affected device, compromising the confidentiality, integrity, and availability of the router. Given the high CVSS score and public exploit availability, affected devices are at significant risk if exposed to untrusted networks.

No official patch or remediation is currently available from the vendor. Users should restrict network access to the affected device's management interface to trusted networks only and monitor for suspicious activity. Since the vendor has not responded and no fix is provided, consider replacing or isolating affected devices until a patch is released. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.