TOTOLINK NR1800X Firmware 9.1.0u.6681 B20230703
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:nr1800x_firmware:9.1.0u.6681_b20230703:*:*:*:*:*:*:*
part: o version: 9.1.0u.6681_b20230703 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | Nr1800X Firmware (1f55f5e5-6988-5b98-a2ed-d71ce843675c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-60688 |
vulnerable | 2026-06-08 07:37:27.009231 |
Details available
A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (setDefResponse function). The binary reads the "IpAddress" parameter from a web request and copies it into a fixed-size stack buffer using strcpy() without any length validation. Maliciously crafted input can overflow the buffer, leading to potential arbitrary code execution or memory corruption, without requiring authentication.
Published: 2025-11-13T00:00:00.000Z
Updated: 2026-07-05T01:19:36.157Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60686 |
vulnerable | 2026-06-08 07:37:27.008218 |
Details available
A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B20230630, LR1200GB V9.1.0u.6619_B20230130, and NR1800X V9.1.0u.6681_B20230703). Both programs parse the contents of /proc/net/arp using sscanf() with "%s" format specifiers into fixed-size stack buffers without length validation. Specifically, one function writes user-controlled data into a single-byte buffer, and the other into adjacent small arrays without bounds checking. An attacker who controls the contents of /proc/net/arp can trigger memory corruption, leading to denial of service or potential arbitrary code execution.
Published: 2025-11-13T00:00:00.000Z
Updated: 2026-07-05T01:19:27.665Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60684 |
vulnerable | 2026-06-08 07:37:27.005778 |
Details available
A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (sub_42F32C function). The web interface reads the "lang" parameter and constructs Help URL strings using sprintf() into fixed-size stack buffers without proper length validation. Maliciously crafted input can overflow these buffers, potentially leading to arbitrary code execution or memory corruption, without requiring authentication.
Published: 2025-11-13T00:00:00.000Z
Updated: 2026-07-05T01:19:18.493Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45845 |
vulnerable | 2026-06-08 07:25:11.121975 |
Details available
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.
Published: 2025-05-08T00:00:00.000Z
Updated: 2025-05-13T14:24:54.180Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45844 |
vulnerable | 2026-06-08 07:25:11.121666 |
Details available
TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.
Published: 2025-05-08T00:00:00.000Z
Updated: 2025-05-13T14:13:51.793Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45843 |
vulnerable | 2026-06-08 07:25:11.121137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45842 |
vulnerable | 2026-06-08 07:25:11.120674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-45841 |
vulnerable | 2026-06-08 07:25:11.118847 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-35388 |
vulnerable | 2026-06-08 06:39:41.919487 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.