CVE-2025-60333

TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
41.2
In the wild
Unconfirmed
What it is

⚠️ A single crafted input can bring your TOTOLINK N600R router to its knees! Just like a traffic jam caused by a single stalled vehicle, this stack overflow vulnerability can lead to a complete Denial of Service (DoS). Think of it as a restaurant where one overly complicated order clogs up the kitchen, preventing any new orders from being processed. In this case, the 'wepkey2' parameter is that troublesome dish, causing the router to crash under pressure. An attacker exploiting this vulnerability can effectively render your router useless, denying service to all users connected to it. Imagine your internet going out right when you're about to stream your favorite show—absolutely devastating!

Put simply

Think of it as a restaurant where one overly complicated order clogs up the kitchen, preventing any new orders from being processed. In this case, the 'wepkey2' parameter is that troublesome dish, causing the router to crash under pressure. This stack overflow vulnerability in TOTOLINK N600R's setWiFiMultipleConfig function occurs when handling the 'wepkey2' parameter, leading to a crash of the service and subsequent denial of network access.

What to do

An attacker exploiting this vulnerability can effectively render your router useless, denying service to all users connected to it. Imagine your internet going out right when you're about to stream your favorite show—absolutely devastating! To mitigate this vulnerability, immediately update the firmware to the latest version released by TOTOLINK. Regular checks for any available patches are crucial to maintaining your network's integrity. You've got this! Keeping your network secure is a heroic task, and with these steps, you'll be a security champion in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00490 · 41.2th percentile
Published
2025-10-22T00:00Z
EPSS history
Timeline
  • 22 OCT 00:00Z
    TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function
    cvelistv5