This vulnerability is a stack-based buffer overflow in the boa formIpv6Setup dhcp_dns functionality of the Totolink X2000R. A specially crafted HTTP request that targets the dhcp_dns2 parameter can trigger the overflow, allowing an attacker to execute arbitrary code on the device.

The affected product is the Totolink X2000R router running firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. The vulnerability exists in the web management interface’s DHCP DNS configuration.

The CVSS score of 9.1 indicates high severity, and the absence of an EPSS score suggests limited publicly available exploitation data. The vulnerability does not appear in the CISA KEV catalog. Exploitation requires an authenticated HTTP request, implying that attackers need prior access to the router’s management interface or credentials. Once authenticated, an attacker can send a malicious request to trigger the stack overflow and gain arbitrary code execution over the network.