A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (sub_42F32C function). The web interface reads the "lang" parameter and constructs Help URL strings using sprintf() into fixed-size stack buffers without proper length validation. Maliciously crafted input can overflow these buffers, potentially leading to arbitrary code execution or memory corruption, without requiring authentication.
References
| Link | Resource |
|---|---|
| http://totolink.com | Broken Link |
| https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60684.md | Exploit Third Party Advisory |
| https://www.totolink.net/ | Product |
Configurations
History
24 Nov 2025, 15:33
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:totolink:nr1800x:-:*:*:*:*:*:*:* cpe:2.3:h:totolink:lr1200gb:-:*:*:*:*:*:*:* cpe:2.3:o:totolink:lr1200gb_firmware:9.1.0u.6619_b20230130:*:*:*:*:*:*:* cpe:2.3:o:totolink:nr1800x_firmware:9.1.0u.6681_b20230703:*:*:*:*:*:*:* |
|
| First Time |
Totolink lr1200gb
Totolink lr1200gb Firmware Totolink nr1800x Firmware Totolink nr1800x Totolink |
|
| References | () http://totolink.com - Broken Link | |
| References | () https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60684.md - Exploit, Third Party Advisory | |
| References | () https://www.totolink.net/ - Product |
13 Nov 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | CWE-121 |
13 Nov 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-13 16:15
Updated : 2025-11-24 15:33
NVD link : CVE-2025-60684
Mitre link : CVE-2025-60684
CVE.ORG link : CVE-2025-60684
JSON object : View
Products Affected
totolink
- lr1200gb
- nr1800x
- lr1200gb_firmware
- nr1800x_firmware
CWE
CWE-121
Stack-based Buffer Overflow