This vulnerability affects the Totolink A3002MU router's formFilter function within the /boafrm/formFilter component. A remote attacker can manipulate the ip6addr argument to trigger a buffer overflow condition. The vulnerability has a high CVSS 4.0 score of 9.4, indicating critical severity with network attack vector, low attack complexity, no privileges required, and no user interaction. Public exploit code is available, but no vendor patch or remediation details are provided in the input data.

Successful exploitation can lead to a buffer overflow, potentially allowing remote code execution or denial of service on the affected device. Given the critical CVSS score and public exploit availability, this poses a significant risk to affected Totolink A3002MU devices if unmitigated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider limiting network exposure of the affected device and monitoring for exploit attempts. No vendor advisory or patch links are provided in the current data.