The vulnerability is a stack‑based buffer overflow in the boa formIpv6Setup static network configuration routine. An attacker who can authenticate to the device’s HTTP interface can send a specially crafted request that manipulates the static_gw parameter, causing arbitrary code execution. The CVSS score of 9.1 indicates a high severity, showing that successful exploitation would compromise confidentiality, integrity, and availability of the router.

Affected systems are Totolink X2000R routers running firmware TOTOLINK‑X2000R‑Gh‑V1.0.0‑B20250421.1327. The flaw resides in the static IPv6 configuration path and requires legitimate authentication credentials to send the malicious request.

The CVSS score reflects the potential severity of the flaw, while the EPSS score is not available, so an exploitation probability cannot be quantified at present. The vulnerability is not listed in the CISA KEV catalog. Attackers must first authenticate to the HTTP management interface and then craft a request targeting the static_gw parameter. If successful, they can execute code with the privileges of the web service, potentially taking full control of the device.