medium6.5
CVE-2025-55901
TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.
Impact
TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | A3300r Firmware | Version 17.0.0cu.596_b20250515 |