# CVE-2025-60688: ToToLink Routers stack buffer overflow in cstecgi.cgi

Source: https://junglewise.ai/threats/cve-2025-60688-totolink-routers-stack-buffer-overflow-in-cstecgi-cgi  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-13. Updated: 2026-07-05  
License: CC BY 4.0 with a link back

CVE-2025-60688 · Severity: medium · CVSS 6.5 · Published 2025-11-13

A security vulnerability has been identified in ToToLink LR1200GB and NR1800X routers, which are used to provide wireless internet connectivity. An attacker can send a specially crafted web request to the device to cause a system crash or potentially take control of the router. This attack can be performed remotely over the network without requiring any login credentials or user interaction.

Technologies: [TOTOLINK Lr1200gb](https://junglewise.ai/threats/technologies/lr1200gb), [TOTOLINK Lr1200gb Firmware](https://junglewise.ai/threats/technologies/lr1200gb-firmware), [TOTOLINK Nr1800x](https://junglewise.ai/threats/technologies/nr1800x), [TOTOLINK Nr1800x Firmware](https://junglewise.ai/threats/technologies/nr1800x-firmware). Vendors: [TOTOLINK](https://junglewise.ai/threats/vendors/totolink).

## Quick answers

**Is CVE-2025-60688 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-60688 being exploited in the wild.

**How severe is CVE-2025-60688?** Medium severity, with a CVSS score of 6.5, published 13 November 2025.

**Which products and versions are affected?** TOTOLINK Lr1200gb V9.1.0u.6619_B20230130; TOTOLINK Nr1800x V9.1.0u.6681_B20230703.

**Is there a fix for CVE-2025-60688?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-60688 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2025-60688?** Check whether you run TOTOLINK Lr1200gb, TOTOLINK Lr1200gb Firmware, TOTOLINK Nr1800x or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow (CWE-121) exists in the 'setDefResponse' function within the 'cstecgi.cgi' binary of affected ToToLink router firmware. The vulnerability is caused by the use of the 'strcpy()' function to copy the 'IpAddress' parameter from a JSON web request into a fixed-size stack buffer without performing length validation. An unauthenticated remote attacker can exploit this by sending a POST request with an oversized 'IpAddress' string, leading to memory corruption or potential arbitrary code execution. A public Proof of Concept (PoC) demonstrating the overflow has been disclosed.

## Affected products

- ToToLink LR1200GB firmware V9.1.0u.6619_B20230130
- ToToLink NR1800X firmware V9.1.0u.6681_B20230703

## Timeline

- 2025-11-13: advisory: NVD published the CVE record

## References

- [https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60688.md](https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60688.md)
- [https://www.totolink.net/](https://www.totolink.net/)

## Related threats

- [TOTOLINK NR1800X stack-based buffer overflow in setUploadSetting](https://junglewise.ai/threats/cve-2026-82616-totolink-nr1800x-stack-based-buffer-overflow-in-setuploadsetting)
- [TOTOLINK NR1800X command injection in setUssd](https://junglewise.ai/threats/cve-2026-82597-totolink-nr1800x-command-injection-in-setussd)
- [Totolink NR1800X stack overflow in Form_Logout](https://junglewise.ai/threats/cve-2026-15701-totolink-nr1800x-stack-overflow-in-form-logout)
- [ToToLink LR1200GB command injection in cstecgi.cgi imei parameter](https://junglewise.ai/threats/cve-2025-60687-totolink-lr1200gb-command-injection-in-cstecgi-cgi-imei-parameter)
- [ToToLink Routers stack overflow in infostat.cgi and cstecgi.cgi](https://junglewise.ai/threats/cve-2025-60686-totolink-routers-stack-overflow-in-infostat-cgi-and-cstecgi-cgi)