CVE-2025-63469

Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_421BAC function

High · published October 31, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

⚡ A single crafted request can trigger a stack overflow in Totolink LR350's ssid parameter, crashing your router into a Denial of Service! Think of it like a restaurant where one overly large order causes the kitchen to grind to a halt, leaving everyone waiting for their meals. This stack overflow is that gigantic order that simply overwhelms the system! The result? Your router will go down, leaving your entire network offline and frustrating everyone trying to connect. This isn't just an inconvenience; it's a potential loss of productivity and access to critical resources for you and your family or coworkers!

Put simply

Think of it like a restaurant where one overly large order causes the kitchen to grind to a halt, leaving everyone waiting for their meals. This stack overflow is that gigantic order that simply overwhelms the system! In the Totolink LR350 v9.3.5u.6369_B20220309, a stack overflow vulnerability exists in the sub_421BAC function, triggered by the ssid parameter. When exploited, this bug can lead to a Denial of Service, effectively rendering the device inoperable.

What to do

The result? Your router will go down, leaving your entire network offline and frustrating everyone trying to connect. This isn't just an inconvenience; it's a potential loss of productivity and access to critical resources for you and your family or coworkers! To mitigate this risk, immediately update your Totolink LR350 to the latest firmware version that addresses this vulnerability. Additionally, consider implementing network monitoring to detect any abnormal traffic patterns that could indicate an attack. Regularly check for updates to stay protected! You've got this! With timely action, you'll keep your network secure and operational. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.4th percentile
Published
2025-10-31T00:00Z
EPSS history
Timeline
  • 31 OCT 00:00Z
    Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_421BAC function
    cvelistv5