CVE-2025-60335

A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted…

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

⚡ A sneaky NULL pointer dereference in TOTOLINK N600R could lead to a Denial of Service with just a crafted HTTP request! Think of it like someone calling a restaurant and asking for a dish that doesn’t exist — the kitchen gets confused and shuts down, leaving everyone hungry and frustrated. If exploited, an attacker could crash the device, rendering network services unavailable. Imagine your Wi-Fi going dark during an important online meeting or streaming your favorite show — absolutely devastating!

Put simply

Think of it like someone calling a restaurant and asking for a dish that doesn’t exist — the kitchen gets confused and shuts down, leaving everyone hungry and frustrated. This vulnerability arises in the main function due to a NULL pointer dereference, which means the system encounters a request it can't process, leading to a complete service outage.

What to do

If exploited, an attacker could crash the device, rendering network services unavailable. Imagine your Wi-Fi going dark during an important online meeting or streaming your favorite show — absolutely devastating! To protect your device, patch it immediately to the latest version, 4.3.0cu.7866_B20220506, to close this loophole. Regularly check for firmware updates to keep your network sturdy and secure. You've got this! By taking these steps, you’ll be a security hero keeping your network safe! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02132 · 81.8th percentile
Published
2025-10-22T00:00Z
EPSS history
Timeline
  • 22 OCT 00:00Z
    A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted…
    cvelistv5