This vulnerability is a stack‑based buffer overflow located in the Boa formIpv6Setup DHCP DNS configuration of the Totolink X2000R firmware. A specially crafted HTTP request that targets the dhcp_dns1 parameter can corrupt the stack, allowing an attacker to execute arbitrary code on the device. The description indicates that the attacker must have authenticated access to the HTTP management interface to trigger the overflow.

Totolink X2000R devices running firmware version TOTOLINK‑X2000R‑Gh‑V1.0.0‑B20250421.1327 are affected.

The CVSS score of 9.1 classifies this flaw as critical. EPSS information is not available and the vulnerability is not listed in the CISA KEV catalog, yet the required authenticated HTTP request and the nature of the buffer overflow suggest that an adversary with network or local network access could exploit it. An attacker would prepare a malicious HTTP request, send it through the device’s management interface, and cause the plugin to execute arbitrary code with the privileges of the device process.