TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function.
totolink nr1800x_firmware 9.3.5u.6369_b20220309