CVE-2025-63153

TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function

High · published November 10, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

⚡ A single crafted request is all it takes to bring your TOTOLink A7000R router to its knees! 🔥 Think of it like a restaurant that can only serve a limited number of customers at once. If one table orders way too much food, it clogs the kitchen and nobody else can be served. This stack overflow vulnerability in the ssid parameter of the urldecode function does exactly that, overwhelming your router's ability to operate! An attacker could send a specially crafted request to your router, causing a Denial of Service (DoS). This means that legitimate users would be locked out and unable to access the internet, which is absolutely devastating for your network stability!

Put simply

Think of it like a restaurant that can only serve a limited number of customers at once. If one table orders way too much food, it clogs the kitchen and nobody else can be served. This stack overflow vulnerability in the ssid parameter of the urldecode function does exactly that, overwhelming your router's ability to operate! The vulnerability arises from a stack overflow in the ssid parameter when processed by the urldecode function, allowing attackers to exploit this error and disrupt normal router operations.

What to do

An attacker could send a specially crafted request to your router, causing a Denial of Service (DoS). This means that legitimate users would be locked out and unable to access the internet, which is absolutely devastating for your network stability! To protect yourself, upgrade your TOTOLink A7000R to version V9.1.0u.6115_B20201022 or later immediately. It’s also a good idea to regularly review your network configurations and monitor for any suspicious activities. Don't wait too long! You've got this! Patch your router, and you'll be back in business, safeguarding your network in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.8th percentile
Published
2025-11-10T00:00Z
EPSS history
Timeline
  • 10 NOV 00:00Z
    TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function
    cvelistv5