CVE-2025-60688 | Totolink LR1200GB/NR1800X 9.1.0u cstecgi.cgi strcpy IpAddress stack-based overflow

November 13, 2025 Yanac

A vulnerability was found in Totolink LR1200GB and NR1800X 9.1.0u. It has been rated as critical. This affects the function strcpy of the file cstecgi.cgi. Performing manipulation of the argument IpAddress results in stack-based buffer overflow.

This vulnerability is reported as CVE-2025-60688. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More