CVE-2025-63465: High severity TOTOLINK LR350 vulnerability

Published Oct 31, 2025

Updated

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub422880 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Affected Software

3 affected components

TOTOLINK LR350

All of the following

TOTOLINK Lr350 Firmware=9.3.5u.6369_b20220309

TOTOLINK LR350

Event History

Oct 31, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-63465?

The severity of CVE-2025-63465 is classified as a high-risk vulnerability due to its potential to cause Denial of Service.

How do I fix CVE-2025-63465?

To fix CVE-2025-63465, update the Totolink LR350 firmware to the latest version provided by the manufacturer.

What is the impact of CVE-2025-63465?

The impact of CVE-2025-63465 is a stack overflow that can lead to a Denial of Service (DoS) condition on the affected device.

Which software is affected by CVE-2025-63465?

CVE-2025-63465 affects the Totolink LR350 router running version v9.3.5u.6369_B20220309.

Can CVE-2025-63465 be exploited remotely?

Yes, CVE-2025-63465 can be exploited remotely through crafted requests targeting the ssid parameter.