CVE-2025-60682 | Totolink A720R 4.1.5cu.614_B20230630 cloudupdate_check sub_402414 magicid/url command injection

November 13, 2025 Yanac

A vulnerability categorized as critical has been discovered in Totolink A720R 4.1.5cu.614_B20230630. This vulnerability affects the function sub_402414 of the file cloudupdate_check. Executing manipulation of the argument magicid/url can lead to command injection.

This vulnerability appears as CVE-2025-60682. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More