What is CVE-2025-25524?

CVE-2025-25524 is a medium-severity vulnerability in Totolink X6000r, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 5.1/10. Published 2025-02-11.

How severe is CVE-2025-25524?

Medium severity. CVSS v3 base score is 5.1 out of 10.

Buffer overflow in Totolink X6000r

CVE-2025-25524

Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652_B20230116 due to the lack of length verification, which is related to the addition of Wi-Fi filtering rules. Attackers who successfully exploit this vulnerability can ca…

Vulnerability class: Buffer Overflow

EPSS: 0.002 (5.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.1 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.

Affected products

Totolink X6000r
Totolink X6000r_firmware — versions 9.4.0cu.652_b20230116
N/a — versions n/a

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

cve@mitre.org (Broken Link)

Frequently asked questions

What is CVE-2025-25524?: CVE-2025-25524 is a medium-severity vulnerability in Totolink X6000r, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 5.1/10. Published 2025-02-11.
How severe is CVE-2025-25524?: Medium severity. CVSS v3 base score is 5.1 out of 10.