Totolink LR1200GB Firmware vulnerabilities

19 CVEs affecting Totolink LR1200GB Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-60688, published 2025-11-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-46977, published 2023-10-31. Critical severity, CVSS 9.8. EPSS: 8.7% chance of exploitation in the next 30 days. TOTOLINK LR1200GB V9.1.0u.6619_B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth.
CVE-2025-60687, published 2025-11-13. Medium severity, CVSS 6.5. EPSS: 6.6% chance of exploitation in the next 30 days. An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619_B20230130 within the cstecgi.cgi binary (sub_41EC68 function). The binary reads the…
CVE-2024-0292, published 2024-01-08. Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the…
CVE-2024-0293, published 2024-01-08. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected by this vulnerability is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The…
CVE-2024-0291, published 2024-01-08. High severity, CVSS 8.8. EPSS: 4.4% chance of exploitation in the next 30 days. A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi. The…
CVE-2024-0295, published 2024-01-08. Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. This affects the function setWanCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the…
CVE-2024-0294, published 2024-01-08. Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected by this issue is the function setUssd of the file /cgi-bin/cstecgi.cgi. The…
CVE-2024-1783, published 2024-02-23. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130/9.3.5u.6698_B20230810. Affected is the function loginAuth of the file /cgi-bin/cstecgi.cgi of the…
CVE-2024-0572, published 2024-01-16. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of…
CVE-2024-0571, published 2024-01-16. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. This issue affects the function setSmsCfg of the file /cgi-bin/cstecgi.cgi. The…

Latest

CVE-2025-60688, published 2025-11-13. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (setDefResponse…
CVE-2025-60686, published 2025-11-13. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B20230630, LR1200GB V9.1.0u.6619_B20230130, and NR1800X…
CVE-2025-60684, published 2025-11-13. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (sub_42F32C…
CVE-2024-0578, published 2024-01-16. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the…
CVE-2024-0577, published 2024-01-16. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation…
CVE-2024-0576, published 2024-01-16. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been declared as critical. This vulnerability affects the function setIpPortFilterRules of the file /cgi-bin/cstecgi.cgi.…
CVE-2024-0575, published 2024-01-16. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been classified as critical. This affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation…
CVE-2024-0574, published 2024-01-16. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130 and classified as critical. Affected by this issue is the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The…