CVE-2025-6401

Published Jun 21, 2025

Last updated 25 days ago

CVSS medium 5.1

Overview

Description: A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been classified as problematic. This affects an unknown part of the file /boafrm/formFilter of the component HTTP POST Message Handler. The manipulation of the argument url leads to denial of service. The exploit has been disclosed to the public and may be used.
Source: cna@vuldb.com
NVD status: Awaiting Analysis

Risk scores

CVSS 4.0

Type: Secondary
Base score: 5.1
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: MEDIUM

CVSS 3.1

Type: Secondary
Base score: 3.5
Impact score: 1.4
Exploitability score: 2.1
Vector string: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Severity: LOW

CVSS 2.0

Type: Secondary
Base score: 2.3
Impact score: 2.9
Exploitability score: 4.4
Vector string: AV:A/AC:M/Au:S/C:N/I:N/A:P

Weaknesses

cna@vuldb.com: CWE-404

Hype score: Not currently trending

References

Sources include official advisories and independent security research.