CVE-2025-6401

2.0 lowEPSS 0.5%

Low (2.0) in totolink n300rh firmware. EPSS 0.5% chance of exploitation in the next 30 days.

A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been classified as problematic. This affects an unknown part of the file /boafrm/formFilter of the component HTTP POST Message Handler. The manipulation of the argument url leads to denial of service. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

2.0 low

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

3.5 low

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-404
Published: 2025-06-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

totolink:n300rh_firmware

References

https://github.com/d2pq/cve/blob/main/616/21.md
https://github.com/d2pq/cve/blob/main/616/21.md#poc
https://vuldb.com/?ctiid.313395
https://vuldb.com/?id.313395
https://vuldb.com/?submit.597688

Check your stack JSON