CVE-2025-70329: Command Injection
TOTOLink X5000R v9.1.0cu2415B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd executable. The vlanVidLan1 (and other vlanVidLanX) parameters are retrieved via UciGetStr and passed to the CsteSystem function without adequate validation or filtering. This allows an authenticated attacker to execute arbitrary shell commands with root privileges by injecting shell metacharacters into the affected parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-70329?
CVE-2025-70329 has a high severity due to its potential to allow OS command injection.
How do I fix CVE-2025-70329?
To fix CVE-2025-70329, update the TOTOLink X5000R device to a patched version that addresses the OS command injection vulnerability.
What systems are affected by CVE-2025-70329?
CVE-2025-70329 affects the TOTOLink X5000R running version 9.1.0cu_2415_B20250515.
What kind of attack can be executed using CVE-2025-70329?
An attacker can exploit CVE-2025-70329 to execute arbitrary OS commands on the affected system.
Is there a workaround for CVE-2025-70329 if I cannot update?
A possible workaround for CVE-2025-70329 is to restrict access to the affected service to trusted networks only.