A stack‑based buffer overflow exists in the web management interface of TOTOLINK N150RT firmware V3.4.0‑B20201030. It is triggered by sending a specially crafted ApCliWEPKey value to the /boafrm/formAjaxSet endpoint and can lead to arbitrary code execution on the device, compromising confidentiality, integrity, and availability.

The vulnerability specifically affects TOTOLINK N150RT (NTR150) routers running firmware version 3.4.0‑B20201030. No other firmware versions have been reported as affected, but the issue is tied to the particular code path present in this version.

The CVSS score of 8.8 indicates a high‑severity weakness, while the EPSS score of less than 1% suggests a low but non‑zero exploitation probability. The flaw is reachable remotely via an HTTP POST request to /boafrm/formAjaxSet using the setting/setWiFiRepeaterConfig path. Based on the description, it is inferred that the vulnerability may be triggerable without authentication in the device’s default configuration, though authentication requirements are not explicitly stated. Although the vulnerability is not listed in the CISA KEV catalog, the combination of high impact and remote accessibility means that exposed routers represent a significant risk to attackers with network access.