Description
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formFilter (access-control / URL filter configuration handler) and is triggered by the url request parameter when the addFilterUrl (or addFilterUrlFlag) action flag is set.
Published: 2026-09-29
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Update Firmware
AI Analysis

Impact

A stack-based buffer overflow exists in the web management interface of TOTOLINK N150RT firmware V3.4.0-B20201030. It is triggered by a URL request parameter when the addFilterUrl or addFilterUrlFlag action flag is set on the /boafrm/formFilter route. This overflow can corrupt the call stack and potentially allow an attacker to execute arbitrary code or crash the device, thereby exposing the device to unauthorized control or denial of service.

Affected Systems

The affected system is the TOTOLINK N150RT (NTR150) router running firmware V3.4.0-B20201030.

Risk and Exploitability

The vulnerability is reachable remotely through the web interface. The CVSS score is 8.8, the EPSS score is < 1%, and it is not listed in the CISA KEV catalog. It is inferred that an unauthenticated or authenticated user inside the network can trigger it by sending a crafted request to the /boafrm/formFilter endpoint, and that once access to the management interface is obtained, stack‑based buffer overflows typically carry a high exploitation potential.

Generated by OpenCVE AI on October 1, 2026 at 04:44 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the router firmware to the latest version provided by TOTOLINK.
  • If an upgrade is not yet available, disable or restrict access to the router’s web management interface using network segmentation or a firewall rule that blocks external traffic to port 80/443 for the device.
  • If disabling external access is not sufficient, disable or remove the URL filter feature in the router’s settings to eliminate the vulnerable endpoint.

Generated by OpenCVE AI on October 1, 2026 at 04:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 03:45:00 +0000

Type Values Removed Values Added
Title Stack-based Buffer Overflow in TOTOLINK N150RT Web Management Interface
Weaknesses CWE-120

Wed, 30 Sep 2026 21:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-121
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 05:00:00 +0000

Type Values Removed Values Added
Title Stack-based Buffer Overflow in TOTOLINK N150RT Web Management Interface
Weaknesses CWE-120

Wed, 30 Sep 2026 03:00:00 +0000

Type Values Removed Values Added
First Time appeared Totolink
Totolink n150rt
Vendors & Products Totolink
Totolink n150rt

Tue, 29 Sep 2026 18:00:00 +0000

Type Values Removed Values Added
Description A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formFilter (access-control / URL filter configuration handler) and is triggered by the url request parameter when the addFilterUrl (or addFilterUrlFlag) action flag is set.
References

Subscriptions

Totolink N150rt
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-09-30T20:11:11.572Z

Reserved: 2026-09-22T00:00:00.000Z

Link: CVE-2026-94954

cve-icon Vulnrichment

Updated: 2026-09-30T19:16:22.143Z

cve-icon NVD

Status : Deferred

Published: 2026-09-29T18:17:18.430

Modified: 2026-09-30T21:17:17.800

Link: CVE-2026-94954

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T04:45:12Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow