CVE-2025-63459

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_421CF0 function

High · published October 31, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

⚡ A sneaky stack overflow lurks in the Totolink A7000R, and it’s hiding in the ssid5g parameter! 🚨 Think of it like a restaurant that overbooks tables—too many requests for the same seat leads to chaos and nobody gets served. This vulnerability could flood your network with requests, pushing it to its limits like a jam-packed diner at peak hour! An attacker could exploit this stack overflow to trigger a Denial of Service (DoS), potentially shutting down your device and leaving your network in the lurch. Imagine being cut off from the internet during a crucial meeting or favorite streaming session—absolutely devastating!

Put simply

Think of it like a restaurant that overbooks tables—too many requests for the same seat leads to chaos and nobody gets served. This vulnerability could flood your network with requests, pushing it to its limits like a jam-packed diner at peak hour! The vulnerability in Totolink A7000R v9.1.0u.6115_B20201022 allows attackers to leverage a crafted request targeting the ssid5g parameter, causing a stack overflow in the sub_421CF0 function, leading to a service disruption.

What to do

An attacker could exploit this stack overflow to trigger a Denial of Service (DoS), potentially shutting down your device and leaving your network in the lurch. Imagine being cut off from the internet during a crucial meeting or favorite streaming session—absolutely devastating! To protect your network, upgrade to the latest firmware version that addresses this vulnerability. Regularly check for updates, and consider configuring your router to limit the number of simultaneous requests to enhance safety. Don't leave your network at risk! You've got this! By taking these proactive steps, you’ll be a security hero in no time. 🦸‍♂️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.4th percentile
Published
2025-10-31T00:00Z
EPSS history
Timeline
  • 31 OCT 00:00Z
    Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_421CF0 function
    cvelistv5