This vulnerability involves a stack-based buffer overflow in the formSetSystemSettings function of the Belkin F9K1015 router firmware version 1.00.10. Specifically, improper handling of the webpage argument in the /goform/formSetSystemSettings endpoint allows an attacker to overflow the stack buffer. The flaw is remotely exploitable without authentication or user interaction. The vendor was notified but has not issued any patch or mitigation guidance. The CVSS 4.0 score is 8.7 (high), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected device, potentially leading to full compromise of the router. This may result in disruption of network services, interception or manipulation of network traffic, and unauthorized control over the device. Since the vulnerability is remotely exploitable without authentication, it poses a significant risk to affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. As the vendor has not responded or released a fix, users should consider mitigating exposure by restricting network access to the device's management interface, disabling remote management if enabled, or replacing the device with a non-affected model. Monitor official Belkin channels for any future updates or patches addressing this vulnerability.