CVE-2025-70327
CVSS v3
9.8
CRITICAL
EPSS Score
2.6 %
exploit probability
CISA KEV
No
known exploited
Exploitation
poc
SSVC status
Description
TOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the setDiagnosisCfg handler of the /usr/sbin/lighttpd executable. The ip parameter is retrieved via websGetVar and passed to a ping command through CsteSystem without validating if the input starts with a hyphen (-). This allows remote authenticated attackers to inject arbitrary command-line options into the ping utility, potentially leading to a Denial of Service (DoS) by causing excessive resource consumpti
Technical details
- CVSS v3 Vector
- 3.1
- Published
- 2026-02-23
- Last Modified
- 2026-02-26
Frequently asked questions
What is CVE-2025-70327?
TOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the setDiagnosisCfg handler of the /usr/sbin/lighttpd executable. The ip parameter is retrieved via websGetVar and passed to a ping command through CsteSystem without validating if the input starts with a hyphen (-). This allows remote authenticated attackers to inject arbitrary command-line options into the ping utility, potentially leading to a Denial of Service (DoS) by causing excessive resource consumpti
Is CVE-2025-70327 actively exploited?
A proof-of-concept exploit exists for CVE-2025-70327, but active exploitation has not been confirmed at this time.
What is the CVSS score for CVE-2025-70327?
CVE-2025-70327 has a CVSS v3 base score of 9.8 (CRITICAL severity), with vector string 3.1.
Is CVE-2025-70327 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2025 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).