A stack‑based buffer overflow exists in the formCrossBandSwitch function of Belkin F9K1122’s web interface. By manipulating the webpage argument, an attacker can overwrite the stack, potentially executing arbitrary code on the router. The flaw is exploitable remotely through the device’s HTTP management interface, giving attackers a full compromise of the device.

The vulnerability affects Belkin F9K1122 routers running firmware version 1.00.33. No other firmware releases are listed as affected in the data.

The CVSS base score of 8.7 classifies the issue as high severity, and the EPSS score indicates that the likelihood of public exploitation is currently low (<1 %). However, an exploit has already been released, and because the flaw is triggered remotely over the web interface, any exposed router remains at risk unless mitigated. The vulnerability is not yet catalogued in the CISA KEV database.