CVE-2025-25524: Totolink x6000r Firmware

Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652_B20230116 due to the lack of length verification, which is related to the addition of Wi-Fi filtering rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.

Affected products

• Totolink x6000r Firmware: version 9.4.0cu.652_b20230116 only

Published 2025-02-11. Last modified 2026-06-17.