CVE-2025-60334: High severity TOTOLINK N600R vulnerability

Published Oct 22, 2025

Updated

TOTOLINK N600R v4.3.0cu.7866B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Affected Software

3 affected components

TOTOLINK N600R

All of the following

TOTOLINK N600R firmware=4.3.0cu.7866_b20220506

TOTOLINK N600R

Event History

Oct 22, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-60334?

CVE-2025-60334 is classified as a high severity vulnerability due to its potential to cause a Denial of Service (DoS).

How do I fix CVE-2025-60334?

To fix CVE-2025-60334, update the TOTOLINK N600R firmware to a version that addresses this vulnerability.

What impact does CVE-2025-60334 have on the TOTOLINK N600R?

CVE-2025-60334 allows attackers to exploit a stack overflow in the ssid parameter, leading to a Denial of Service on the TOTOLINK N600R.

Is the TOTOLINK N600R affected by CVE-2025-60334?

Yes, the TOTOLINK N600R with firmware version 4.3.0cu.7866_B20220506 is vulnerable to CVE-2025-60334.

What devices are impacted by CVE-2025-60334?

CVE-2025-60334 affects the TOTOLINK N600R router specifically running firmware version 4.3.0cu.7866_B20220506.