CVE-2025-60333

High CVSS: 7.5

TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Vendor

Totolink

Product

N600r Firmware

CWE

CWE-121

Yayın Tarihi

2025-10-22 16:15:44

Güncelleme

2025-10-24 13:19:12

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-121 N600r Firmware HIGH Totolink 2025

Referanslar

https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/TOTOLINK/wepkey2/wepkey2.md https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/TOTOLINK/wepkey2/wepkey2.md

Benzer Kayıtlar

Critical

CVE-2026-31027

TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste…

Medium

CVE-2026-5178

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this issue is the func…

Medium

CVE-2026-5177

A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this vulnerability is the function…

Medium

CVE-2026-5176

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. Affected is the function setSyslogCfg of…

Medium

CVE-2026-5105

A vulnerability was detected in Totolink A3300R 17.0.0cu.557_b20221024. The affected element is the function setVpnPassC…

Medium

CVE-2026-5104

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Impacted is the function setStatic…