CVE-2025-63462: High severity TOTOLINK A7000R vulnerability
Published Oct 31, 2025
·Updated
Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub421A04 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Affected Software
3 affected components
TOTOLINK A7000R
All of the following
TOTOLINK A7000R firmware=9.1.0u.6115_b20201022
TOTOLINK A7000R
Event History
Oct 31, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-63462?
CVE-2025-63462 has a high severity due to its potential to cause a Denial of Service (DoS).
2
How do I fix CVE-2025-63462?
To fix CVE-2025-63462, update to the latest firmware version provided by Totolink for the A7000R device.
3
What type of vulnerability is CVE-2025-63462?
CVE-2025-63462 is classified as a stack overflow vulnerability.
4
What device is affected by CVE-2025-63462?
CVE-2025-63462 affects the Totolink A7000R router.
5
How can an attacker exploit CVE-2025-63462?
An attacker can exploit CVE-2025-63462 by sending a crafted request using the wifiOff parameter to trigger a stack overflow.