CVE-2025-63463

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC function

High · published October 31, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

⚡ A crafty request could send your Totolink LR350 into a tailspin! This stack overflow via the wifiOff parameter can trigger a Denial of Service (DoS) like a bad order sending a restaurant into chaos. 🔥 Think of it like a restaurant dealing with too many orders at once, causing the kitchen to crash and leaving customers waiting indefinitely. A single mismanaged order can bring the whole service to a halt! If successfully exploited, attackers could render your router completely unresponsive, locking you out of your own network. Imagine your devices unable to connect to the internet — not great for those Netflix binges or urgent work emails!

Put simply

Think of it like a restaurant dealing with too many orders at once, causing the kitchen to crash and leaving customers waiting indefinitely. A single mismanaged order can bring the whole service to a halt! This vulnerability results from a stack overflow triggered by the wifiOff parameter in the sub_4232EC function, allowing attackers to send specially crafted requests that overwhelm the device's processing ability.

What to do

If successfully exploited, attackers could render your router completely unresponsive, locking you out of your own network. Imagine your devices unable to connect to the internet — not great for those Netflix binges or urgent work emails! To protect yourself, update your Totolink LR350 firmware to the latest version immediately. Disable unnecessary features and ensure your network is secured with strong credentials. Regularly check for firmware updates as part of your routine maintenance! You've got this! Follow these steps and keep your network safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.4th percentile
Published
2025-10-31T00:00Z
EPSS history
Timeline
  • 31 OCT 00:00Z
    Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub_4232EC function
    cvelistv5