A stack-based buffer overflow in the Totolink LR350 router exposes the device to unauthenticated remote denial of service attacks.

This vulnerability is a stack overflow located in the sub_421BAC function, which is triggered when an unauthenticated attacker sends a specially crafted ssid parameter to the device.

Successful exploitation of this vulnerability results in a denial of service, rendering the network device unresponsive and potentially disrupting all dependent business communications and operations. With a CVSS score of 7.5, the vulnerability is classified as High severity, reflecting the ease of remote, unauthenticated exploitation that requires no user interaction.

Immediate Action: Since no official patch is currently available, administrators should restrict management access to the device to trusted internal IP addresses only.

Proactive Monitoring: Monitor device logs for anomalous traffic patterns or repeated crashes and sudden service interruptions that may indicate an ongoing denial of service attempt.

Compensating Controls: Implement network-level ingress filtering and utilize a firewall to block unauthorized access to the router management interface from untrusted networks.

Public Exploit Available: Yes, a proof-of-concept exists as documented in the technical write-up provided by the researcher (referenced in the CVE record).

Given the high CVSS score and the public availability of proof-of-concept code, this vulnerability poses a significant risk to network availability. Organizations utilizing the Totolink LR350 should prioritize isolating these devices from the public internet and continue to monitor the vendor portal for an official firmware update to address the stack overflow condition.