This vulnerability arises from improper input validation in the ToToLink LR1200GB Router firmware 9.1.0u.6619_B20230130. The cstecgi.cgi binary's sub_41EC68 function reads the 'imei' parameter from incoming web requests and only verifies that it is 15 characters long. It then uses sprintf() to insert this parameter directly into a system command, which is executed via system(). Because there is no authentication required and no sanitization beyond length checking, an attacker can craft a malicious 'imei' value to execute arbitrary commands on the router remotely. This is classified under CWE-77 (Improper Neutralization of Special Elements used in a Command).

An unauthenticated attacker can execute arbitrary commands on the affected router remotely by sending a specially crafted web request with a malicious 'imei' parameter. This can lead to partial compromise of the device's integrity and confidentiality. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and impacts confidentiality and integrity with no impact on availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Until a patch is released, restrict access to the router's web interface from untrusted networks and monitor for suspicious requests targeting the 'imei' parameter. Avoid exposing the router's management interface to the internet.