CVE-2025-63468: High severity TOTOLINK LR350 vulnerability

Published Oct 31, 2025

Updated

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the httphost parameter in the sub426EF8 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Affected Software

3 affected components

TOTOLINK LR350

All of the following

TOTOLINK Lr350 Firmware=9.3.5u.6369_b20220309

TOTOLINK LR350

Event History

Oct 31, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-63468?

CVE-2025-63468 is considered to have a high severity level due to its potential for causing a Denial of Service.

How do I fix CVE-2025-63468?

To fix CVE-2025-63468, it is recommended to update your Totolink LR350 device to the latest firmware version.

What is the impact of CVE-2025-63468?

The impact of CVE-2025-63468 is that it allows attackers to exploit a stack overflow vulnerability, leading to a Denial of Service.

Who is affected by CVE-2025-63468?

Users of Totolink LR350 devices running version v9.3.5u.6369_B20220309 are affected by CVE-2025-63468.

Can CVE-2025-63468 lead to remote exploitation?

Yes, CVE-2025-63468 can potentially be exploited remotely through crafted HTTP requests.