Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619_B20230130 within the cstecgi.cgi binary (sub_41EC68 function). The binary reads the "imei" parameter from a web request and verifies only that it is 15 characters long. The parameter is then directly inserted into a system command using sprintf() and executed with system(). Maliciously crafted IMEI input can execute arbitrary commands on the router without authentication.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TOTOLINK LR1200GB 安全漏洞
Vulnerability Description
TOTOLINK LR1200GB是中国吉翁电子（TOTOLINK）公司的一款无线双频 4G LTE 路由器。 TOTOLINK LR1200GB V9.1.0u.6619_B20230130版本存在安全漏洞，该漏洞源于cstecgi.cgi二进制文件中存在未经验证的命令注入，可能导致执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A