Belkin F9K1015 Command Injection Vulnerability via WAN IP Address Manipulation

A command injection vulnerability has been identified in the Belkin F9K1015 router, specifically in version 1.00.10. The issue arises in the '/goform/formBSSetSitesurvey' endpoint, where the 'wan_ipaddr' parameter can be manipulated to inject commands. This vulnerability can be exploited remotely, and a public proof-of-concept exploit is available.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a POST request to '/goform/formBSSetSitesurvey' with the 'wan_ipaddr' parameter. For command injection, include a command wrapped in backticks, such as a ping command. For the stack overflow vulnerability, send a significantly long string that exceeds the buffer's capacity, which can be achieved by repeating characters to create an overload.