CVE-2025-60333: High severity TOTOLINK N600R vulnerability

Published Oct 22, 2025

Updated

TOTOLINK N600R v4.3.0cu.7866B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Affected Software

3 affected components

TOTOLINK N600R

All of the following

TOTOLINK N600R firmware=4.3.0cu.7866_b20220506

TOTOLINK N600R

Event History

Oct 22, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-60333?

CVE-2025-60333 has a high severity rating due to its potential to cause a Denial of Service (DoS) in the affected device.

How do I fix CVE-2025-60333?

To mitigate CVE-2025-60333, it is recommended to update the TOTOLINK N600R firmware to a version that addresses this stack overflow vulnerability.

What version of TOTOLINK N600R is affected by CVE-2025-60333?

CVE-2025-60333 specifically affects the TOTOLINK N600R firmware version 4.3.0cu.7866_B20220506.

What type of vulnerability is CVE-2025-60333?

CVE-2025-60333 is a stack overflow vulnerability found in the setWiFiMultipleConfig function.

Can CVE-2025-60333 be exploited remotely?

Yes, CVE-2025-60333 can potentially be exploited remotely to cause a Denial of Service (DoS) on the device.