CVE-2025-70328

🗓️ 23 Feb 2026 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 7 Views🌐 WEB

CVE-2025-70328 enables authenticated command injection on TOTOLINK X6000R via the host_time parameter in NTPSyncWithHost.

Reporter	Title	Published	Views	Family All 5
CNNVD	TOTOLINK X6000R 安全漏洞	23 Feb 202600:00	–	cnnvd
Cvelist	CVE-2025-70328	23 Feb 202600:00	–	cvelist
NVD	CVE-2025-70328	23 Feb 202621:19	–	nvd
Positive Technologies	PT-2026-21552	23 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-70328	24 Feb 202601:44	–	redhatcve

NVD

Node

totolink x6000r_firmwareMatch9.4.0cu.1498_b20250826

AND

Source	Link
notion	www.notion.so/TOTOLINK-X6000R-NTPSyncWithHost-2d170566ca7f803a8096c1b31b2ed42f
github	www.github.com/neighborhood-H/0-DAY/blob/main/Toto-link/X6000R/NTPSyncWihtHost/report.md

Parameter	Position	Path	Description	CWE
host_time	request body	/usr/sbin/shttpd	OS command injection via host_time parameter in NTPSyncWithHost handler; first two tokens validated, remainder not sanitized allowing execution of arbitrary shell commands.	CWE-78, CWE-94

26 Feb 2026 03:06Current

6Medium risk

Vulners AI Score6

CVSS 3.18.8

EPSS0.03148