A flaw has been found in Totolink N300RT 3.4.0-B20250430. This affects an unknown function of the file /boafrm/formIpQoS. Executing a manipulation of the argume…

Published:

27 april 2026 om 22:00:00

Alert date:

28 april 2026 om 05:01:43

Source:

nvd.nist.gov

Mobile & IoT, Network Infrastructure

A buffer overflow vulnerability has been discovered in Totolink N300RT version 3.4.0-B20250430. The flaw affects an unknown function in the /boafrm/formIpQoS file through manipulation of the entry_name argument. The vulnerability can be exploited remotely and a public exploit is available. This represents a significant security risk for affected router devices as attackers can potentially execute arbitrary code remotely.

Technical details

Mitigation steps:

Affected products:

Totolink N300RT