An attacker that can send a crafted POST request to /cgi-bin/cstecgi.cgi can overflow the ssid buffer in the setWizardCfg function. The resulting stack-based buffer overflow enables arbitrary code execution on the Totolink LR350, effectively giving the attacker full control over the device. This flaw is a classic buffer overflow (CWE‑119/CWE‑120) that directly leads to remote code execution and disrupts the router's confidentiality, integrity, and availability.

The vulnerability is present in the Totolink LR350 router running firmware version 9.3.5u.6369_B20220309. This model is identified as Totolink LR350. Only the specified firmware revision has been confirmed as vulnerable; other firmware versions may be unaffected, but no other affected versions are listed in the CNA data.

The CVSS v3 score of 8.7 reflects a high‑impact flaw, while the EPSS score of less than 1% indicates low current exploitation probability, yet a publicly released exploit exists. The vulnerability is not listed in the CISA KEV catalog, so it has not yet been observed in the wild on a large scale. Attackers can trigger the overflow remotely without authentication by sending a malformed POST request to the affected endpoint. Although exploitation likelihood is still emerging, the potential impact warrants immediate attention.