This vulnerability involves a stack-based buffer overflow triggered by manipulating the ssid5g argument in the setWiFiEasyGuestCfg function of the TOTOLINK A7000R router firmware (up to version 9.1.0u.6115). The affected CGI script (/cgi-bin/cstecgi.cgi) does not properly validate input length, enabling remote attackers to overflow the stack. The CVSS 4.0 base score is 8.7, reflecting high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

Successful exploitation can lead to remote code execution or denial of service on the affected device due to the stack-based buffer overflow. The vulnerability impacts confidentiality, integrity, and availability of the device. The exploit code is publicly available, increasing the risk of attacks. However, there are no known exploits observed in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device's management interface and monitor for unusual activity. Do not rely on generic mitigations; await vendor updates.