CVE-2025-63461

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function

High · published October 31, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

⚡ A crafted request can send your Totolink A7000R spiraling into chaos! This stack overflow vulnerability could trigger a Denial of Service, leaving your router gasping for air. 🔥 Think of it like a restaurant where one overly complicated order clogs the kitchen, causing everyone else to wait indefinitely. Just as that single order disrupts service, a carefully constructed input can overwhelm the router's resources. If exploited, this vulnerability can lead to a complete Denial of Service, meaning your network could come crashing down. Imagine your internet connection dropping out just when you need it most – absolutely devastating for any connected household!

Put simply

Think of it like a restaurant where one overly complicated order clogs the kitchen, causing everyone else to wait indefinitely. Just as that single order disrupts service, a carefully constructed input can overwhelm the router's resources. This stack overflow vulnerability in the Totolink A7000R occurs via the ssid5g parameter in the urldecode function, allowing attackers to send a crafted request that overwhelms the stack and disrupts service.

What to do

If exploited, this vulnerability can lead to a complete Denial of Service, meaning your network could come crashing down. Imagine your internet connection dropping out just when you need it most – absolutely devastating for any connected household! To protect yourself, upgrade your router firmware to the latest version immediately. Implement filtering to avoid unexpected input values and regularly monitor network traffic for unusual activity. You've got this! With a simple firmware update, you can keep your network running smoothly and securely. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.4th percentile
Published
2025-10-31T00:00Z
EPSS history
Timeline
  • 31 OCT 00:00Z
    Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function
    cvelistv5