CVE-2025-63466

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the sub_426EF8 function

High · published October 31, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

⚡ A crafty request can cause a stack overflow in Totolink LR350, potentially knocking your device offline! Think of this vulnerability like a restaurant that can only serve a limited number of customers. If someone tries to bring in more diners than the kitchen can handle, the whole service grinds to a halt, leaving everyone waiting and frustrated. An attacker could exploit this flaw to trigger a Denial of Service (DoS) attack, rendering your router completely unresponsive. This means your internet connection could be interrupted, impacting all connected devices and causing major inconvenience.

Put simply

Think of this vulnerability like a restaurant that can only serve a limited number of customers. If someone tries to bring in more diners than the kitchen can handle, the whole service grinds to a halt, leaving everyone waiting and frustrated. This stack overflow vulnerability occurs through the password parameter in the sub_426EF8 function, allowing attackers to send specially crafted requests that overwhelm the system's stack.

What to do

An attacker could exploit this flaw to trigger a Denial of Service (DoS) attack, rendering your router completely unresponsive. This means your internet connection could be interrupted, impacting all connected devices and causing major inconvenience. To secure your device, patch it immediately to the latest firmware version. Regularly check for updates from the manufacturer to ensure you have the latest security fixes. Also, consider implementing firewall rules to monitor unusual traffic patterns. You've got this! With these steps, you'll keep your network running smoothly and protect your devices! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.4th percentile
Published
2025-10-31T00:00Z
EPSS history
Timeline
  • 31 OCT 00:00Z
    Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the sub_426EF8 function
    cvelistv5