CVE-2025-63465

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_422880 function

High · published October 31, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

⚡ A sneaky stack overflow in the Totolink LR350 could crash your entire router just by sending a specially crafted request! 💥 Think of it like a restaurant overbooking its tables — when too many guests try to squeeze in at once, the whole operation grinds to a halt. That's what this vulnerability does to your network: it can leave it overwhelmed and non-functional. An attacker could exploit this vulnerability to trigger a Denial of Service (DoS), meaning your router could stop responding altogether. This would prevent users from accessing the internet, creating major disruptions for anyone relying on that connection.

Put simply

Think of it like a restaurant overbooking its tables — when too many guests try to squeeze in at once, the whole operation grinds to a halt. That's what this vulnerability does to your network: it can leave it overwhelmed and non-functional. This stack overflow occurs via the 'ssid' parameter in the 'sub_422880' function, allowing attackers to send malformed requests that exceed the stack's capacity, leading to a crash of the router's operating system.

What to do

An attacker could exploit this vulnerability to trigger a Denial of Service (DoS), meaning your router could stop responding altogether. This would prevent users from accessing the internet, creating major disruptions for anyone relying on that connection. To mitigate this issue, update your Totolink LR350 to the latest firmware version that addresses this vulnerability. Regularly check for firmware updates and consider implementing network monitoring solutions to catch anomalies early. 🛡️ You've got this! Stay proactive and secure your network against these pesky vulnerabilities! 🦸‍♂️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.4th percentile
Published
2025-10-31T00:00Z
EPSS history
Timeline
  • 31 OCT 00:00Z
    Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_422880 function
    cvelistv5