CVE-2025-63463: High severity TOTOLINK LR350 vulnerability
Published Oct 31, 2025
·Updated
Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub4232EC function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Affected Software
3 affected components
TOTOLINK LR350=v9.3.5u.6369_B20220309
All of the following
TOTOLINK Lr350 Firmware=9.3.5u.6369_b20220309
TOTOLINK LR350
Event History
Oct 31, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-63463?
The severity of CVE-2025-63463 is classified as high due to its potential to cause a Denial of Service.
2
How does CVE-2025-63463 exploit the Totolink LR350?
CVE-2025-63463 exploits a stack overflow vulnerability via the wifiOff parameter in the sub_4232EC function.
3
How do I fix CVE-2025-63463?
To fix CVE-2025-63463, update the Totolink LR350 to a version that addresses this vulnerability.
4
What are the potential impacts of CVE-2025-63463?
The potential impacts of CVE-2025-63463 include service disruption and making the device unresponsive.
5
Which version of Totolink LR350 is affected by CVE-2025-63463?
The version of Totolink LR350 affected by CVE-2025-63463 is v9.3.5u.6369_B20220309.