CVE-2025-55895

CRITICAL · 9.1 CVSS Gepubliceerd: 15-12-2025 CWE-284

Beschrijving

TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attackers can send payloads to the interface without logging in (remote).

Vendors

Totolink

Affected products

A3300r Firmware A3300r N200re Firmware N200re

References

github.com
www.totolink.net