CVE-2025-63462
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Risk Assessment
An attacker can remotely crash or reboot the router, causing network access disruptions for users.
Recommendation
Update the Totolink A7000R firmware to the latest version available from the vendor. If updating is not possible, restrict access to the router's management interface.
Other vulnerabilities in Totolink A7000R
See all- CVE-2025-51452Critical
In TOTOLINK A7000R firmware version 9.1.0u.6115_B20201022, a vulnerability allows login bypass. An attacker can send a crafted request to formLoginAuth.htm to gain unauthorized access.
- CVE-2022-32993Critical
An access control issue was discovered in the TOTOLINK A7000R router running firmware version V4.1cu.4134, specifically in the /cgi-bin/ExportSettings.sh script. Lack of proper authentication allows unauthorized access to export device settings.
Original NVD description (English source)
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub_421A04 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS