VYPR

LR1200GB Router

by Totolink

CVEs (1)

  • CVE-2025-60687MedNov 13, 2025
    risk 0.43cvss 6.5epss 0.07

    An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619_B20230130 within the cstecgi.cgi binary (sub_41EC68 function). The binary reads the "imei" parameter from a web request and verifies only that it is 15 characters…