Threats tagged 'ghsa-7cq5-4hvg-2j88'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2025-60687Unauthenticated Command Injection Vulnerability Exists Medium6.52025-11-13GCVE DatabaseCVE-2025-60687 An unauthenticated command injection vulnerability (CWE-77) exists in the ToToLink LR1200GB Router firmware version 9.1.0u.6619_B20230130. The vulnerability is in the cstecgi.cgi binary, specifically in the sub_41EC68 function, where the 'imei' parameter from a web request is only checked for length and then directly used in a system command. This allows an attacker to execute arbitrary commands on the router without authentication. Report on CVE-2025-60687 Vulnerability CWE-77 #ghsa-7cq5-4hvg-2j88	GCVE Database	2025-11-13

Page 1 of 1