This vulnerability affects TOTOLINK A800R firmware version 4.1.2cu.5137_B20200730. The issue is a stack-based buffer overflow in the setMacQos function of the /cgi-bin/cstecgi.cgi file within the firewall.so component. By sending a specially crafted macAddress argument, an attacker can trigger the overflow remotely. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Exploit code is publicly available, increasing the risk of exploitation. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability can lead to arbitrary code execution or denial of service on the affected device. Because the attack can be initiated remotely without authentication or user interaction, it poses a significant risk to network security. The availability of public exploit code increases the likelihood of exploitation attempts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the device's management interface from untrusted networks and monitoring for suspicious activity related to the setMacQos function. Avoid exposing the device's CGI interface to the internet.