CVE Catalog
CVE-2025-55895
CriticalSummary
TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attackers can send payloads to the interface without logging in (remote).
Risk Assessment
The risk involves unauthorized remote access to devices, potentially allowing attackers to change configuration or take control of the router.
Recommendation
Check for firmware updates from the vendor and apply them. Restrict access to the management interface from external networks.
Original NVD description (English source)
TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attackers can send payloads to the interface without logging in (remote).