This vulnerability affects the Belkin F9K1015 router firmware version 1.00.10. The issue is a stack-based buffer overflow in the formSetFirewall function located in the /goform/formSetFirewall endpoint. By manipulating the 'webpage' argument, an attacker can overflow the stack buffer remotely, potentially leading to arbitrary code execution or denial of service. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity, with network attack vector, low complexity, no privileges required, and no user interaction needed. The vendor was contacted but has not provided any response or patch. Exploit code is publicly available, increasing the risk of exploitation.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device. Since the attack vector is network-based and requires no privileges or user interaction, the risk is significant for exposed devices. The availability of public exploit code increases the likelihood of attacks. No known exploits in the wild have been reported yet, but the lack of vendor response and patch increases exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or issued a fix, users should consider mitigating exposure by restricting network access to the affected device's management interface, disabling remote management if possible, or replacing the device with a secure alternative. Monitor for any updates from Belkin regarding patches or official mitigations.