Medium severity5.1NVD Advisory· Published Nov 13, 2025· Updated Jul 5, 2026
CVE-2025-60685
CVE-2025-60685
Description
A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary (sub_401EE0 function). The binary reads the /proc/stat file using fgets() into a local buffer and subsequently parses the line using sscanf() into a single-byte variable with the %s format specifier. Maliciously crafted /proc/stat content can overwrite adjacent stack memory, potentially allowing an attacker with filesystem write privileges to execute arbitrary code on the device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- ToToLink/A720R Router firmwaredescription
- Range: V4.1.5cu.614_B20230630
- cpe:2.3:o:totolink:a720r_firmware:4.1.5cu.614_b20230630:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A720R/CVE-2025-60685.mdnvdExploitThird Party Advisory
- www.totolink.netnvdProduct
News mentions
0No linked articles in our index yet.