CVE-2025-60336

CWE-476 — NULL Pointer Dereference3 documents3 sources
Severity
7.5HIGH
EPSS
2.1%
top 15.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Totolink N600r Firmware
Timeline
PublishedOct 22

Description

A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDtotolink/n600r_firmware4.3.0cu.7866_b20220506

🔴Vulnerability Details

2
CVEList
CVE-2025-60336: A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4↗2025-10-22
▶
GHSA
GHSA-x36f-6qhh-53j9: A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4↗2025-10-22
▶
CVE-2025-60336 (HIGH CVSS 7.5) | A NULL pointer dereference in the s | cvebase.io