CVE-2025-60336

A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a…

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

🚨 A seemingly innocent HTTP request could trigger a NULL pointer dereference in TOTOLINK N600R, plunging your network into a Denial of Service! 🔥 Think of this as a restaurant where a waiter misplaces an order; one wrong request can throw the entire kitchen into chaos, leaving everyone waiting hungry. This vulnerability is like that one pesky order that causes all the other diners to miss their meals! With this NULL pointer dereference, attackers can craft a request that sends your router into a tailspin, effectively shutting down your network and leaving you unable to connect. The potential for disruption is significant; imagine losing access to important services and the frustration that would follow!

Put simply

Think of this as a restaurant where a waiter misplaces an order; one wrong request can throw the entire kitchen into chaos, leaving everyone waiting hungry. This vulnerability is like that one pesky order that causes all the other diners to miss their meals! In the TOTOLINK N600R v4.3.0cu.7866_B20220506, a function fails to correctly handle a NULL pointer, allowing attackers to exploit this oversight with specially formatted HTTP requests to cause a DoS condition.

What to do

With this NULL pointer dereference, attackers can craft a request that sends your router into a tailspin, effectively shutting down your network and leaving you unable to connect. The potential for disruption is significant; imagine losing access to important services and the frustration that would follow! To safeguard your network, update your TOTOLINK N600R to the latest firmware version released by the vendor. Regularly monitor your devices for updates and consider implementing network-level protections against unexpected traffic. 🛡️ You've got this! Follow these steps and keep your network safe from pesky interruptions. 🌟

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01773 · 78.0th percentile
Published
2025-10-22T00:00Z
EPSS history
Timeline
  • 22 OCT 00:00Z
    A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a…
    cvelistv5