# CVE-2025-60686: ToToLink Routers stack overflow in infostat.cgi and cstecgi.cgi

Source: https://junglewise.ai/threats/cve-2025-60686-totolink-routers-stack-overflow-in-infostat-cgi-and-cstecgi-cgi  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-13. Updated: 2026-07-05  
License: CC BY 4.0 with a link back

CVE-2025-60686 · Severity: medium · CVSS 5.1 · Published 2025-11-13

A security vulnerability exists in several ToToLink router models, which are devices used to provide internet connectivity and manage home or office networks. If an attacker gains local access to the device's file system, they can exploit a flaw in how the router processes internal network status files. This could allow the attacker to crash the device or potentially take control of it, leading to a loss of internet service or unauthorized access to the router's settings.

Technologies: [TOTOLINK A720r](https://junglewise.ai/threats/technologies/a720r), [TOTOLINK A720r Firmware](https://junglewise.ai/threats/technologies/a720r-firmware), [TOTOLINK Lr1200gb Firmware](https://junglewise.ai/threats/technologies/lr1200gb-firmware). Vendors: [TOTOLINK](https://junglewise.ai/threats/vendors/totolink).

## Quick answers

**Is CVE-2025-60686 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-60686 being exploited in the wild.

**How severe is CVE-2025-60686?** Medium severity, with a CVSS score of 5.1, published 13 November 2025.

**Which products and versions are affected?** TOTOLINK A720r Firmware V4.1.5cu.614_B20230630; TOTOLINK Lr1200gb Firmware V9.1.0u.6619_B20230130.

**Is there a fix for CVE-2025-60686?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-60686 attacked?** It is attacked with local access, in device firmware.

**Am I affected by CVE-2025-60686?** Check whether you run TOTOLINK A720r, TOTOLINK A720r Firmware or TOTOLINK Lr1200gb Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability is a stack-based buffer overflow (CWE-121) located in the infostat.cgi and cstecgi.cgi binaries. The root cause is the use of sscanf() with the '%s' format specifier to parse the contents of /proc/net/arp into fixed-size stack buffers without length validation. In infostat.cgi, data is written into a single-byte char buffer, while in cstecgi.cgi, data is written into adjacent small arrays. An attacker with the ability to control the contents of /proc/net/arp or manipulate the filesystem (e.g., via a symbolic link to a malicious file) can trigger memory corruption. This can lead to a denial of service (DoS) or potential arbitrary code execution under the context of the web server. The vulnerability requires local access or a prerequisite exploit to modify the local environment.

## Affected products

- ToToLink A720R Firmware V4.1.5cu.614_B20230630
- ToToLink LR1200GB Firmware V9.1.0u.6619_B20230130
- ToToLink NR1800X Firmware V9.1.0u.6681_B20230703

## Timeline

- 2025-11-13: advisory: NVD Published Date
- 2025-11-13: disclosed: Public disclosure of the vulnerability and PoC

## References

- [https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A720R/CVE-2025-60686.md](https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A720R/CVE-2025-60686.md)
- [https://www.totolink.net/](https://www.totolink.net/)

## Related threats

- [TOTOLINK A720R stack buffer overflow in MAC filtering](https://junglewise.ai/threats/cve-2026-82539-totolink-a720r-stack-buffer-overflow-in-mac-filtering)
- [ToToLink Routers stack buffer overflow in cstecgi.cgi](https://junglewise.ai/threats/cve-2025-60688-totolink-routers-stack-buffer-overflow-in-cstecgi-cgi)
- [ToToLink LR1200GB command injection in cstecgi.cgi imei parameter](https://junglewise.ai/threats/cve-2025-60687-totolink-lr1200gb-command-injection-in-cstecgi-cgi-imei-parameter)
- [ToToLink A720R stack buffer overflow in sysconf binary](https://junglewise.ai/threats/cve-2025-60685-totolink-a720r-stack-buffer-overflow-in-sysconf-binary)
- [ToToLink Routers stack buffer overflow in cstecgi.cgi](https://junglewise.ai/threats/cve-2025-60684-totolink-routers-stack-buffer-overflow-in-cstecgi-cgi)