CVE-2025-60686 Details
Description
A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B20230630, LR1200GB V9.1.0u.6619_B20230130, and NR1800X V9.1.0u.6681_B20230703). Both programs parse the contents of /proc/net/arp using sscanf() with "%s" format specifiers into fixed-size stack buffers without length validation. Specifically, one function writes user-controlled data into a single-byte buffer, and the other into adjacent small arrays without bounds checking. An attacker who controls the contents of /proc/net/arp can trigger memory corruption, leading to denial of service or potential arbitrary code execution.
A local stack-based buffer overflow vulnerability has been identified in the ToToLink A720R, LR1200GB, and NR1800X router models. This vulnerability arises in the 'infostat.cgi' and 'cstecgi.cgi' binaries, which improperly parse the '/proc/net/arp' file using 'sscanf()' with unvalidated format specifiers. The flawed parsing allows for user-controlled data to be written into fixed-size stack buffers, creating a risk of memory corruption. An attacker with the ability to manipulate the ARP file content can exploit this vulnerability, potentially leading to a denial-of-service condition or arbitrary code execution.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Nov 13, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A720R/CVE-2025-60686.md | [email protected] | ExploitThird Party Advisory |
| https://www.totolink.net/ | [email protected] | Product |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| totolink a720r firmware | 4.1.5cu.614_b20230630 |
CPE
Remediation
| |
| totolink a720r | All versions |
CPE
Remediation
| |
| totolink lr1200gb firmware | 9.1.0u.6619_b20230130 |
CPE
Remediation
| |
| totolink lr1200gb | All versions |
CPE
Remediation
| |
| totolink nr1800x firmware | 9.1.0u.6681_b20230703 |
CPE
Remediation
| |
| totolink nr1800x | All versions |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 5, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 19, 2025 | Initial Analysis | [email protected] |
| Nov 13, 2025 | CVE Modified | CISA-ADP |
| Nov 13, 2025 | New CVE Received | [email protected] |