CVE-2025-63460: High severity TOTOLINK A7000R vulnerability

Published Oct 31, 2025

Updated

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub4222E0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Affected Software

3 affected components

TOTOLINK A7000R

All of the following

TOTOLINK A7000R firmware=9.1.0u.6115_b20201022

TOTOLINK A7000R

Event History

Oct 31, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-63460?

CVE-2025-63460 is classified as a high severity vulnerability due to its potential to cause a Denial of Service (DoS).

How do I fix CVE-2025-63460?

To mitigate CVE-2025-63460, update the Totolink A7000R to the latest firmware version provided by the manufacturer.

What type of vulnerability is CVE-2025-63460?

CVE-2025-63460 is a stack overflow vulnerability that can be exploited through the ssid5g parameter.

What systems are affected by CVE-2025-63460?

CVE-2025-63460 affects the Totolink A7000R router running version v9.1.0u.6115_B20201022.

What is the impact of exploiting CVE-2025-63460?

Exploiting CVE-2025-63460 can result in a Denial of Service (DoS), making the affected device unresponsive.