What is the CVSS score of CVE-2025-46060?

CVE-2025-46060 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 1.1%.

Which versions of N600r Firmware are affected by CVE-2025-46060?

A critical remote code execution vulnerability (CVE-2025-46060) affects TOTOLIK N600R routers, allowing attackers to take complete control of affected devices without authentication.

Is there a public PoC exploit available for CVE-2025-46060?

Yes, a public proof-of-concept exploit is available for CVE-2025-46060. Prioritise patching immediately. EPSS: 1.1%.

How to fix or mitigate CVE-2025-46060?

Within 24 hours: Identify and inventory all TOTOLINK N600R v4.3.0cu.7866_B2022506 devices in your network and isolate affected units from production traffic. Within 7 days: Implement network segmentation to restrict router access, disable remote management features, and monitor for exploitation attempts. Within 30 days: Replace affected routers with patched firmware versions when available from TOTOLINK, or procure alternative router models from vendors with established security update practices.

N600r Firmware CVE-2025-46060

EUVD-2025-18267 CRITICAL

Classic Buffer Overflow (CWE-120)

2025-06-13 cve@mitre.org

Buffer Overflow RCE N600r Firmware

9.8

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 21:34 euvd

EUVD-2025-18267

Analysis Generated

Mar 14, 2026 - 21:34 vuln.today

PoC Detected

Jun 16, 2025 - 14:58 vuln.today

Public exploit code

CVE Published

Jun 13, 2025 - 13:15 nvd

CRITICAL 9.8

DescriptionCVE.org

Buffer Overflow vulnerability in TOTOLINK N600R v4.3.0cu.7866_B2022506 allows a remote attacker to execute arbitrary code via the UPLOAD_FILENAME component

AnalysisAI

Critical remote code execution vulnerability in TOTOLINK N600R router firmware v4.3.0cu.7866_B2022506, exploitable through a buffer overflow in the UPLOAD_FILENAME parameter without authentication. An unauthenticated remote attacker can execute arbitrary code with no user interaction required, achieving complete system compromise with CVSS 9.8 severity. KEV status and active exploitation data unavailable from provided sources; EPSS probability should be assumed high given unauthenticated network attack vector and critical impact.

Technical ContextAI

The vulnerability exists in the file upload handling mechanism of the TOTOLINK N600R wireless router firmware. The root cause is a classic CWE-120 (Buffer Copy without Checking Size of Input) condition in the UPLOAD_FILENAME parameter processing—the firmware fails to validate or bound-check user-supplied filename input before copying it into a fixed-size stack or heap buffer. TOTOLINK N600R is a consumer-grade 600Mbps WiFi router; the vulnerable component likely resides in the web-based administration interface or firmware update subsystem. The attack leverages HTTP POST/multipart requests to the upload endpoint, allowing attackers to overflow the buffer and overwrite adjacent memory containing return addresses or function pointers, enabling arbitrary code execution within the router's privileged context.

RemediationAI

Upgrade TOTOLINK N600R firmware to patched version (version number not provided in sources—contact TOTOLINK support or check official firmware download page at totolink.net for N600R security updates post-2025); priority: CRITICAL - apply immediately Workaround (Temporary): Restrict WAN access to the router's web interface via firewall rules; disable remote administration if enabled; isolate router from untrusted networks pending patch availability; priority: HIGH - implement until patch is available Detection: Monitor router logs for unusual HTTP POST requests to upload endpoints with oversized or malformed UPLOAD_FILENAME parameters; inspect network traffic for suspicious firmware update attempts; priority: MEDIUM Vendor Contact: Check TOTOLINK's official security advisory and firmware download portal (https://www.totolink.net) for N600R patch releases; priority: CRITICAL