CVE-2025-63154 | Totolink A7000R 9.1.0u.6115_B20201022 POST urldecode addEffect stack-based overflow

November 10, 2025 Yanac

A vulnerability, which was classified as critical, has been found in Totolink A7000R 9.1.0u.6115_B20201022. Affected by this issue is the function urldecode of the component POST Handler. This manipulation of the argument addEffect causes stack-based buffer overflow.

This vulnerability is tracked as CVE-2025-63154. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More