CVE-2025-63461: High severity TOTOLINK A7000R vulnerability

Published Oct 31, 2025

Updated

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Affected Software

3 affected components

TOTOLINK A7000R

All of the following

TOTOLINK A7000R firmware=9.1.0u.6115_b20201022

TOTOLINK A7000R

Event History

Oct 31, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-63461?

CVE-2025-63461 has a high severity level due to its potential to cause a Denial of Service.

How do I fix CVE-2025-63461?

To fix CVE-2025-63461, update your Totolink A7000R device to the latest firmware version provided by the manufacturer.

What is the impact of CVE-2025-63461?

The impact of CVE-2025-63461 is that it can lead to a Denial of Service, making the device unresponsive to legitimate requests.

Which device models are affected by CVE-2025-63461?

CVE-2025-63461 specifically affects the Totolink A7000R model.

What does the ssid5g parameter do in relation to CVE-2025-63461?

The ssid5g parameter is involved in the stack overflow vulnerability in CVE-2025-63461, allowing attackers to exploit this flaw.