A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (setDefResponse function). The binary reads the "IpAddress" parameter from a web request and copies it into a fixed-size stack buffer using strcpy() without any length validation. Maliciously crafted input can overflow the buffer, leading to potential arbitrary code execution or memory corruption, without requiring authentication.
References
| Link | Resource |
|---|---|
| http://totolink.com | Broken Link |
| https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60688.md | Exploit Third Party Advisory |
| https://www.totolink.net/ | Product |
Configurations
History
19 Nov 2025, 17:33
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Totolink lr1200gb
Totolink lr1200gb Firmware Totolink nr1800x Firmware Totolink nr1800x Totolink |
|
| References | () http://totolink.com - Broken Link | |
| References | () https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60688.md - Exploit, Third Party Advisory | |
| References | () https://www.totolink.net/ - Product | |
| CPE | cpe:2.3:h:totolink:nr1800x:-:*:*:*:*:*:*:* cpe:2.3:h:totolink:lr1200gb:-:*:*:*:*:*:*:* cpe:2.3:o:totolink:lr1200gb_firmware:9.1.0u.6619_b20230130:*:*:*:*:*:*:* cpe:2.3:o:totolink:nr1800x_firmware:9.1.0u.6681_b20230703:*:*:*:*:*:*:* |
13 Nov 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-121 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
13 Nov 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-13 16:15
Updated : 2025-11-19 17:33
NVD link : CVE-2025-60688
Mitre link : CVE-2025-60688
CVE.ORG link : CVE-2025-60688
JSON object : View
Products Affected
totolink
- lr1200gb
- nr1800x
- lr1200gb_firmware
- nr1800x_firmware
CWE
CWE-121
Stack-based Buffer Overflow