This vulnerability involves a stack-based buffer overflow in the setWiFiBasicConfig function of the wireless.so component in Totolink N300RH firmware 6.1c.1353_B20190305. By manipulating the KeyStr argument remotely via the Web Management Interface, an attacker can trigger a buffer overflow condition. The vulnerability is remotely exploitable without authentication and has a CVSS 4.0 base score of 9.3, reflecting its critical impact. There is no vendor-provided patch or official remediation information available at this time. Public exploit code exists, increasing the risk of exploitation, though no active exploitation has been confirmed.

Successful exploitation of this vulnerability can lead to memory corruption via a stack-based buffer overflow, which may allow an attacker to execute arbitrary code remotely on the affected device. Given the critical CVSS score and remote, unauthenticated attack vector, the impact could be severe, potentially compromising the router and any network it protects. However, no confirmed active exploitation in the wild has been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to the Web Management Interface from untrusted networks and consider disabling remote management features if possible. Monitor Totolink's official channels for updates and apply patches promptly once available.