CVE-2025-60335: Null Pointer Dereference
Published Oct 22, 2025
·Updated
A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
Affected Software
3 affected components
TOTOLINK N600R
All of the following
TOTOLINK N600R firmware=4.3.0cu.7866_b20220506
TOTOLINK N600R
Event History
Oct 22, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-60335?
The severity of CVE-2025-60335 is classified as a Denial of Service (DoS) vulnerability.
2
How do I fix CVE-2025-60335?
To fix CVE-2025-60335, upgrade the TOTOLINK N600R firmware to a version that addresses this vulnerability.
3
What devices are affected by CVE-2025-60335?
CVE-2025-60335 affects TOTOLINK N600R devices running firmware version 4.3.0cu.7866_B20220506.
4
What is a NULL pointer dereference in context of CVE-2025-60335?
In CVE-2025-60335, a NULL pointer dereference occurs when the application attempts to use a NULL pointer, leading to a crash and Denial of Service.
5
Can CVE-2025-60335 be exploited remotely?
Yes, CVE-2025-60335 can be exploited remotely by sending a specially crafted HTTP request to the affected device.