Deviceways

Travel router

Cudy TR1200

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1
Get OpenWrt firmware Release listed · 25.12.6
Rev 1.1
Open hardware record
Original project github.com

Recorded configuration: 16 MB flash; 128 MB RAM

Limitations
DFS
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

Cudy TR1200 v1 — TechInfoDepot (github.com)

Hardware revision
Rev 1.1

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v1

OpenWrt · v1

OpenWrt · v1 — Source documentation (openwrt.org)

Availability recorded by source
Available 2024

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 5.1 (v4.0)

TR1200

Cudy TR1200 ipsec.lua action_ipsec_conn command injection

CVE-2026-4537

Affected firmware
R46-2.4.15-20250721-164017
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability was determined in Cudy TR1200 R46-2.4.15-20250721-164017. Impacted is the function action_ipsec_conn of the file /usr/bin/lib/lua/luci/controller/ipsec.lua. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. Upgrading the affected component is advised. The vendor explains, that "some other customer has reported this to us before. And we have fixed this."

VDB-352325 | Cudy TR1200 ipsec.lua action_ipsec_conn command injection — TR1200 (vuldb.com) ↗VDB-352325 | CTI Indicators (IOB, IOC, TTP, IOA) — TR1200 (vuldb.com) ↗Submit #774447 | cudy AC1200 Wi-Fi Mini VPN Router TR1200 1.0 TR1200-R46-2.4.15-20250721-164017-flash.zip Command Injection — TR1200 (vuldb.com) ↗
CVE published

CVSS 4.8 (v4.0)

TR1200

Cudy TR1200 Wireless Settings config cross site scripting

CVE-2025-11134

Affected firmware
1.16.3-20230804-164635
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A security vulnerability has been detected in Cudy TR1200 1.16.3-20230804-164635. Impacted is an unknown function of the file /cgi-bin/luci/admin/network/wireless/config/ of the component Wireless Settings Page. Such manipulation of the argument SSID leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

VDB-326211 | Cudy TR1200 Wireless Settings config cross site scripting — TR1200 (vuldb.com) ↗VDB-326211 | CTI Indicators (IOB, IOC, TTP, IOA) — TR1200 (vuldb.com) ↗Submit #656886 | Cudy TR1200 1.0 Cross Site Scripting — TR1200 (vuldb.com) ↗
Check more security advisories for this device · CVE.org