Belkin F9K1122 Stack-Based Buffer Overflow Vulnerability

A critical stack-based buffer overflow vulnerability has been identified in the Belkin F9K1122 router running firmware version 1.00.33. The issue arises in the 'formBSSetSitesurvey' function within the '/goform/formBSSetSitesurvey' file, where the 'submit-url-ok' argument can be manipulated, leading to a stack-based overflow. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability causes a stack-based buffer overflow, which can lead to arbitrary code execution.

Reproduction

To reproduce this vulnerability, send a request to the '/goform/formBSSetSitesurvey' endpoint with a crafted 'submit-url-ok' argument that exceeds the buffer size, causing a stack-based overflow. This can be done using a variety of tools that allow for HTTP request manipulation, such as Burp Suite or Postman.