A buffer overflow vulnerability exists in the setWanConfig function of the /cgi-bin/cstecgi.cgi POST request handler in Totolink N300RH firmware version 3.2.4-B20220812. The flaw is triggered by manipulation of the priDns argument. This vulnerability can be exploited remotely and has publicly disclosed exploit code. It has a high severity with a CVSS score of 8.8.