CVE-2025-60334

TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

⚡ A stack overflow in the TOTOLINK N600R could take down your WiFi with a single sneaky input! 🍕 Think of this vulnerability like a restaurant that keeps serving unlimited portions of a single dish without checking if the kitchen can handle it. Eventually, the kitchen gets overwhelmed and the restaurant has to shut down! An attacker could send a specially crafted SSID input, causing your router to crash and leaving your network in the dark. Imagine losing your connection during a critical video call or streaming your favorite show—absolutely devastating!

Put simply

Think of this vulnerability like a restaurant that keeps serving unlimited portions of a single dish without checking if the kitchen can handle it. Eventually, the kitchen gets overwhelmed and the restaurant has to shut down! The stack overflow in the ssid parameter of the setWiFiBasicConfig function can be exploited to trigger a Denial of Service (DoS), making the router unresponsive to any network traffic.

What to do

An attacker could send a specially crafted SSID input, causing your router to crash and leaving your network in the dark. Imagine losing your connection during a critical video call or streaming your favorite show—absolutely devastating! To protect your network, immediately patch your router to the latest firmware version that resolves this issue. Check the manufacturer's website for guidance on securing your device and consider disabling remote management features if they're not needed. You've got this! Follow the steps, and you’ll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00589 · 47.4th percentile
Published
2025-10-22T00:00Z
EPSS history
Timeline
  • 22 OCT 00:00Z
    TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function
    cvelistv5