CVE-2025-63459: High severity TOTOLINK A7000R vulnerability

Published Oct 31, 2025

Updated

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub421CF0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Affected Software

3 affected components

TOTOLINK A7000R

All of the following

TOTOLINK A7000R firmware=9.1.0u.6115_b20201022

TOTOLINK A7000R

Event History

Oct 31, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-63459?

CVE-2025-63459 has a high severity due to its potential to cause a Denial of Service (DoS) through stack overflow.

How do I fix CVE-2025-63459?

To mitigate CVE-2025-63459, update the Totolink A7000R firmware to the latest version that addresses this vulnerability.

What types of attacks can CVE-2025-63459 facilitate?

CVE-2025-63459 can facilitate Denial of Service (DoS) attacks via crafted requests targeting the ssid5g parameter.

Is my device affected by CVE-2025-63459?

The Totolink A7000R with firmware version 9.1.0u.6115_B20201022 is vulnerable to CVE-2025-63459.

What is the nature of the vulnerability CVE-2025-63459?

CVE-2025-63459 is a stack overflow vulnerability that can be exploited to crash the affected device.