CVE-2025-6401 MEDIUM

CVE-2025-6401: TOTOLINK N300RH HTTP POST Message formFilter denial of service

Vendor Totolink
Product N300RH
Weakness CWE-404
Published June 21, 2025
Last update June 23, 2025
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been classified as problematic. This affects an unknown part of the file /boafrm/formFilter of the component HTTP POST Message Handler. The manipulation of the argument url leads to denial of service. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

June 21, 2025 CVE published
June 23, 2025 Record updated