PT-2025-46848 · Totolink · Totolink Nr1800X+1

Published 2025-10-09 · Updated 2025-11-13 · CVE-2025-60688

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions TOTOLINK LR1200GB versions prior to V9.1.0u.6619 B20230130 TOTOLINK NR1800X versions prior to V9.1.0u.6681 B20230703

Description A stack buffer overflow exists in the cstecgi.cgi binary of TOTOLINK routers. The issue is located within the setDefResponse function. The binary copies the IpAddress parameter from a web request into a fixed-size stack buffer using the strcpy() function without validating the input length. A crafted input can cause a buffer overflow, potentially leading to arbitrary code execution or memory corruption. Authentication is not required for exploitation.

Recommendations TOTOLINK LR1200GB versions prior to V9.1.0u.6619 B20230130: Update to version V9.1.0u.6619 B20230130 or later. TOTOLINK NR1800X versions prior to V9.1.0u.6681 B20230703: Update to version V9.1.0u.6681 B20230703 or later.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-15919

CVE-2025-60688

Affected Products

Totolink Lr1200Gb

Totolink Nr1800X

References · 6

• 🔥 https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60688.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-60688 · Security Note
• https://osv.dev/vulnerability/CVE-2025-60688 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15919 · Security Note
• https://totolink.net · Note
• http://totolink.com · Note