CVE-2025-60335

CWE-476 — NULL Pointer Dereference3 documents3 sources
Severity
7.5HIGH
EPSS
1.2%
top 21.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Totolink N600r Firmware
Timeline
PublishedOct 22

Description

A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDtotolink/n600r_firmware4.3.0cu.7866_b20220506

🔴Vulnerability Details

2
GHSA
GHSA-qm6p-qf3f-94pq: A NULL pointer dereference in the main function of TOTOLINK N600R v4↗2025-10-22
▶
CVEList
CVE-2025-60335: A NULL pointer dereference in the main function of TOTOLINK N600R v4↗2025-10-22
▶
CVE-2025-60335 (HIGH CVSS 7.5) | A NULL pointer dereference in the m | cvebase.io