This vulnerability involves a buffer overflow in the Totolink N300RT router firmware 3.4.0-B20250430. Specifically, the issue is in an unknown function within the /boafrm/formIpQoS file, where the entry_name argument can be manipulated to cause a buffer overflow. The vulnerability is remotely exploitable without user interaction but requires high privileges. The CVSS 4.0 base score is 8.6, indicating high severity. No official patch or remediation level has been disclosed by the vendor, and the product is not a cloud service. Exploit code has been published, but no known exploitation in the wild has been confirmed.

Successful exploitation of this vulnerability could allow an attacker with high privileges to cause a buffer overflow remotely, potentially leading to denial of service or arbitrary code execution on the affected device. The high CVSS score reflects the significant impact on confidentiality, integrity, and availability. However, there are no confirmed reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround has been provided, users should monitor vendor communications for updates. Until a patch is available, restricting remote access to the affected device and limiting high-privilege accounts may reduce exposure.