A stack-based buffer overflow exists in the boa formTR069Config function of the Totolink X2000R router. The flaw occurs when processing a specially crafted authenticated HTTP request sent to the TR069 configuration interface. If an attacker can authenticate, the overflow can be exploited to execute arbitrary code on the device, compromising confidentiality, integrity, and availability.

The affected product is the Totolink X2000R router, specifically the firmware version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. No additional vendor or product versions are listed in the data.

The vulnerability requires authenticated access to the TR069 endpoint, indicating that an attacker must already possess valid credentials or have compromised the device to some extent. The CVSS score of 9.1 reflects a high severity and suggests that exploitation is likely in a motivated threat environment, especially given that a crafted HTTP request over the network can trigger it. The vulnerability is not listed in the CISA KEV catalog, but its severity and remote nature mean attackers could gain full control of the device, enabling further lateral movements or network attacks.