PT-2025-46845 · Totolink · Totolink Nr1800X+1

Published 2025-10-09 · Updated 2025-11-24 · CVE-2025-60684

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions ToToLink LR1200GB versions 9.1.0u.6619 B20230130 ToToLink NR1800X versions 9.1.0u.6681 B20230703

Description A stack buffer overflow issue exists in the ToToLink routers. The web interface reads the lang parameter and constructs Help URL strings using sprintf() into fixed-size stack buffers without proper length validation. Maliciously crafted input to the lang parameter can overflow these buffers, potentially leading to arbitrary code execution or memory corruption. This does not require authentication. The vulnerable component is the cstecgi.cgi binary, specifically the sub 42F32C function.

Recommendations ToToLink LR1200GB version 9.1.0u.6619 B20230130: At the moment, there is no information about a newer version that contains a fix for this vulnerability. ToToLink NR1800X version 9.1.0u.6681 B20230703: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-15876

CVE-2025-60684

Affected Products

Totolink Lr1200Gb

Totolink Nr1800X

References · 7

• 🔥 https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60684.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-60684 · Security Note
• https://osv.dev/vulnerability/CVE-2025-60684 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15876 · Security Note
• https://totolink.net · Note
• https://t.me/cveNotify/143808 · Telegram Post
• http://totolink.com · Note