Belkin F9K1122 Stack-Based Buffer Overflow Vulnerability

A critical stack-based buffer overflow vulnerability has been identified in the Belkin F9K1122 router running firmware version 1.00.33. The issue arises in the 'formConnectionSetting' function within the '/goform/formConnectionSetting' file, where the 'max_Conn' and 'timeOut' arguments can be manipulated. This vulnerability allows remote attackers to execute arbitrary code by overwriting the stack with malicious payloads.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, allowing for arbitrary code execution on the affected device.

Reproduction

To reproduce this vulnerability, send a request to the '/goform/formConnectionSetting' endpoint with overly long 'max_Conn' and 'timeOut' parameters. The router will crash, indicating a successful exploitation of the buffer overflow condition.