CVE-2025-57623

MEDIUM

Totolink N600r Firmware - NULL Pointer Dereference

Title source: rule

A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866_B2022506 allows attackers to cause a Denial of Service.

Core 2

Core References

Exploit, Third Party Advisory

Exploit

CVSS v3 5.3

EPSS 0.0022

EPSS Percentile 44.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-476

Status published

Products (1)

totolink/n600r_firmware 4.3.0cu.7866_b2022506

Published Sep 25, 2025

Tracked Since Feb 18, 2026