CVE-2025-60687 | Totolink LR1200GB 9.1.0u.6619_B20230130 IMEI cstecgi.cgi sprintf command injection

November 13, 2025 Yanac

A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. This affects the function sprintf of the file cstecgi.cgi of the component IMEI Handler. Performing manipulation results in command injection.

This vulnerability was named CVE-2025-60687. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More