critical9.1
CVE-2025-55895
TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control.
Impact
TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attackers can send payloads to the interface without logging in (remote).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A3300r Firmware | Version 17.0.0cu.557_b20221024 |
| Totolink | N200re Firmware | Version 9.3.5u.6437_b20230519 |