CVE-2025-63462

Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function

High · published October 31, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

⚡ A crafty request to the `wifiOff` parameter can trigger a stack overflow in Totolink A7000R, sending your network into chaos! 🔥 Think of this as a restaurant that loses its entire menu when someone tries to order a dish that doesn’t exist — complete kitchen shutdown! 🍽️ When that request hits, it overwhelms the system, causing a Denial of Service (DoS) that can leave your devices scrambling for a connection. An attacker can exploit this vulnerability to crash your router, leading to service disruptions. Imagine all your connected devices suddenly unable to access the internet — absolutely devastating for your home or business operations!

Put simply

Think of this as a restaurant that loses its entire menu when someone tries to order a dish that doesn’t exist — complete kitchen shutdown! 🍽️ When that request hits, it overwhelms the system, causing a Denial of Service (DoS) that can leave your devices scrambling for a connection. This vulnerability occurs due to a stack overflow in the `sub_421A04` function when handling the `wifiOff` parameter, allowing attackers to craft a request that overflows the stack and crashes the device.

What to do

An attacker can exploit this vulnerability to crash your router, leading to service disruptions. Imagine all your connected devices suddenly unable to access the internet — absolutely devastating for your home or business operations! To protect yourself, update the Totolink A7000R firmware to the latest version as soon as possible. Monitor incoming requests and consider blocking unexpected or malformed requests on your network to mitigate the risk. You've got this! By updating and staying vigilant, you can keep your network secure and running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.4th percentile
Published
2025-10-31T00:00Z
EPSS history
Timeline
  • 31 OCT 00:00Z
    Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function
    cvelistv5