A stack-based buffer overflow condition exists in the WOSDeviceDropFolder.dll component of the Gladinet Triofox. The vulnerability is triggered when the component processes a long URL path that begins with "/resources". If exploited, an attacker could overwrite the stack and potentially execute arbitrary code, leading to full compromise of the device or crash of the service. The flaw is a classic stack corruption scenario classified as CWE-121.

The vulnerability affects the Gladinet Triofox product. No specific version information is provided, so all instances of Triofox that include the affected DLL are potentially impacted.

The CVSS score of 9.8 indicates a critical severity level, and while an EPSS score is not available, the lack of mitigation detail suggests the exploitation probability cannot be precisely quantified. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is a remote web request to the device using an excessively long path under "/resources", which would trigger the failure in the local processing of the request.