Belkin F9K1122 Stack-Based Buffer Overflow Vulnerability in Web Interface

A critical stack-based buffer overflow vulnerability has been identified in the Belkin F9K1122 router running firmware version 1.00.33. The issue arises in the web interface, specifically within the 'formPPPoESetup' function of the '/goform/formPPPoESetup' file. The vulnerability is triggered by manipulating the 'pppUserName' argument, allowing remote attackers to overflow the stack and potentially execute arbitrary code.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, allowing for arbitrary code execution on the affected device.

Reproduction

To reproduce this vulnerability, send a request to the '/goform/formPPPoESetup' endpoint with an overly long 'pppUserName' parameter. This will cause a stack-based buffer overflow, which can be exploited to execute arbitrary code.