This vulnerability involves a stack-based buffer overflow in the TOTOLINK A800R router firmware version 4.1.2cu.5137_B20200730. Specifically, the issue is in the setMacFilterRules function of the /cgi-bin/cstecgi.cgi file within the firewall.so component. By manipulating the Comment argument, an attacker can trigger a buffer overflow remotely. The vulnerability has been publicly disclosed and carries a CVSS 4.0 score of 8.7, indicating high severity. No vendor advisory or patch information is currently provided, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability could allow a remote attacker with low privileges to cause a stack-based buffer overflow, potentially leading to denial of service or arbitrary code execution with high impact on confidentiality, integrity, and availability. However, there are no confirmed reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to limit remote access to the affected device and monitor for unusual activity related to the setMacFilterRules function. Avoid exposing the management interface to untrusted networks.