The vulnerabilities of the infostat.cgi and cstecgi.cgi scripts in the TOTOLINK A720R, LR1200GB, and NR1800X networking device software allow a malicious individual to cause service interruptions or execute arbitrary code.

The vulnerability of the infostat.cgi and cstecgi.cgi microprogramming devices of the TOTOLINK A720R, LR1200GB, and NR1800X networks devices is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

CVE-2025-60686

A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers A720R V4.1.5cu.614B20230630, LR1200GB V9.1.0u.6619B20230130, and NR1800X V9.1.0u.6681B20230703. Both programs parse the contents of /proc/net/arp using sscanf with "%s" format...

CVE-2022-29377

Totolink A3600R V4.1.2cu.5182B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via the parameter CONTENTLENGTH...