This vulnerability arises from a buffer overflow in the local_app_set_router_token function of Vilo 5 Mesh WiFi System (<= 5.16.1.33). The sscanf function reads token and timezone JSON fields into a fixed-length buffer without proper bounds checking, enabling remote attackers without authentication to execute arbitrary code. The CVSS 3.1 base score is 9.6, indicating a critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and complete confidentiality, integrity, and availability impact.

Successful exploitation allows remote, unauthenticated attackers to execute arbitrary code on affected devices, potentially leading to full system compromise, data breach, or denial of service. The vulnerability affects confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently provided. Until a patch is available, restrict network access to the affected devices to trusted sources only and monitor for unusual activity related to the token and timezone JSON fields.