CVE-2025-63460

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_4222E0 function

High · published October 31, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

⚡ A sneaky stack overflow lies in wait, ready to turn your Totolink A7000R router into a brick! 🚨 Imagine your router as a party host who just can't handle too many guests — one too many requests, and the whole party shuts down. That's exactly what's happening here with the ssid5g parameter triggering a Denial of Service (DoS)! This vulnerability allows attackers to send a single crafted request that can completely overwhelm the device, causing it to crash and become unresponsive. Your home network could be cut off from the internet, leaving you in a digital blackout until the router is reset. Absolutely devastating for connectivity!

Put simply

Imagine your router as a party host who just can't handle too many guests — one too many requests, and the whole party shuts down. That's exactly what's happening here with the ssid5g parameter triggering a Denial of Service (DoS)! The stack overflow occurs in the sub_4222E0 function when the ssid5g parameter is improperly handled, allowing attackers to exploit it through specially crafted input, leading to a Denial of Service condition.

What to do

This vulnerability allows attackers to send a single crafted request that can completely overwhelm the device, causing it to crash and become unresponsive. Your home network could be cut off from the internet, leaving you in a digital blackout until the router is reset. Absolutely devastating for connectivity! Update your Totolink A7000R to version 9.1.0u.6115_B20201023 or later to patch this vulnerability. Additionally, consider implementing monitoring to detect unusual request patterns that could indicate an attack. Don't risk downtime! You've got this! By following these steps, you’ll keep your network running smoothly and maintain your security hero status! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.4th percentile
Published
2025-10-31T00:00Z
EPSS history
Timeline
  • 31 OCT 00:00Z
    Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_4222E0 function
    cvelistv5