Volerion logoVolerion
Volerion logoVolerion

Totolink LR350 Buffer Overflow Vulnerability in POST Request Handler

Vulnerability

A buffer overflow vulnerability has been identified in the Totolink LR350 router, specifically in the firmware version 9.3.5u.6369_B20220309. The issue arises in the POST request handler within the 'setWizardCfg' function of the '/cgi-bin/cstecgi.cgi' file. The vulnerability allows for remote exploitation by manipulating the 'ssid' parameter, leading to a buffer overflow condition.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can commonly lead to arbitrary code execution or causing the device to crash.

Added: Jan 19, 2026, 3:19 PM
Updated: Jan 19, 2026, 3:19 PM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
7.5
exploitability
5.7
remediation
0.0
relevance
2.1
threat
6.4
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.