PT-2025-46856 · Totolink · Totolink Lr1200Gb+2

Published 2025-10-09 · Updated 2025-11-13 · CVE-2025-60686

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions TOTOLINK A720R versions prior to 4.1.5cu.614 B20230630 TOTOLINK LR1200GB versions prior to 9.1.0u.6619 B20230130 TOTOLINK NR1800X versions prior to 9.1.0u.6681 B20230703

Description A stack-based buffer overflow exists in the infostat.cgi and cstecgi.cgi binaries of TOTOLINK routers. The programs parse the contents of /proc/net/arp using the sscanf() function with the "%s" format specifier into fixed-size stack buffers without validating the length of the input. One function writes user-controlled data into a single-byte buffer, while another writes into adjacent small arrays without bounds checking. An attacker controlling the contents of /proc/net/arp can trigger memory corruption, potentially leading to denial of service or arbitrary code execution.

Recommendations TOTOLINK A720R versions prior to 4.1.5cu.614 B20230630 should be updated. TOTOLINK LR1200GB versions prior to 9.1.0u.6619 B20230130 should be updated. TOTOLINK NR1800X versions prior to 9.1.0u.6681 B20230703 should be updated.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-15917

CVE-2025-60686

Affected Products

Totolink A720R

Totolink Lr1200Gb

Totolink Nr1800X

References · 6

• 🔥 https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A720R/CVE-2025-60686.md · Exploit
• https://bdu.fstec.ru/vul/2025-15917 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-60686 · Security Note
• https://osv.dev/vulnerability/CVE-2025-60686 · Vendor Advisory
• https://totolink.net · Note
• http://totolink.com · Note