CVE-2025-22900

The attacker sends a specially crafted request containing an excessively long value of the macCloneMac parameter to the setWanConfig function of the device. The lack of proper input length validation causes a stack buffer overflow. This enables overwriting critical memory areas, leading to control over program execution flow.

An unauthorized remote attacker can execute arbitrary code (RCE) on the device without needing any credentials, and can compromise the confidentiality, integrity, and availability of the system in full scope.

Apply patches available from the manufacturer according to the references. Until an update is released, it is recommended to restrict access to the device management interface only to trusted hosts and isolate the device from unprotected network segments.

Totolink N600R in firmware version v4.3.0cu.7647_B20210106