This vulnerability involves a stack-based buffer overflow in the setWiFiBasicConfig function of the wireless.so file in Totolink N300RH firmware 6.1c.1353_B20190305. The issue arises when the KeyStr argument is manipulated, allowing an attacker to overflow the stack remotely via the Web Management Interface. The vulnerability has a CVSS 4.0 score of 9.3, indicating critical severity with network attack vector, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Exploit code is publicly available, but no official patch or remediation level has been disclosed by the vendor.

Successful exploitation of this vulnerability can lead to remote code execution on the affected device without requiring authentication or user interaction. This can compromise the confidentiality, integrity, and availability of the device and potentially the network it serves. Given the critical CVSS score and public exploit availability, affected devices are at high risk of attack.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation has been published by Totolink, users should monitor vendor communications closely. As a temporary measure, restricting access to the Web Management Interface from untrusted networks or disabling remote management may reduce exposure until a patch is available.