CVE-2025-6401
TOTOLINK N300RH HTTP POST Message formFilter denial of service
- State
- Published
- Severity
- 5.1 Medium
- Published
- Jun 21, 2025
- Updated
- Jun 23, 2025
- Reserved
- Jun 20, 2025
Description
A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been classified as problematic. This affects an unknown part of the file /boafrm/formFilter of the component HTTP POST Message Handler. The manipulation of the argument url leads to denial of service. The exploit has been disclosed to the public and may be used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.1 Medium | CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 3.5 Low | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 3.5 Low | CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 2.3 Low | AV:A/AC:M/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
- CWE-404 Denial of Service
Affected Products
| Product | Versions |
|---|---|
N300RHTOTOLINK |
|
References
- VDB-313395 | TOTOLINK N300RH HTTP POST Message formFilter denial of servicevdb-entrytechnical-description
- VDB-313395 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #597688 | TOTOLINK N300RH_V4 V6.1c.1390_B20191101 Buffer Overflowthird-party-advisory
- https://github.com/d2pq/cve/blob/main/616/21.mdrelated
- https://github.com/d2pq/cve/blob/main/616/21.md#pocexploit
- https://www.totolink.net/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.