TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Dec 15, 2025 · NIST NVD

   Detected

   TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attackers can send payloads to the interface without logging in (remote).

2. Oct 14, 2026 · NIST NVD

   Updated

   TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attackers can send payloads to the interface without logging in (remote).

Affected

• cpe totolink/a3300r firmware17.0.0cu.557_b20221024
• cpe totolink/n200re firmware9.3.5u.6437_b20230519

Sources

• CVE.orgVulnerability recordCVE-2025-55895

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2025-55895

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2025-55895

  TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attackers can send payloads to the interface without logging in (remote).

  nvd.nist.gov

References

• Exploit · github.com
• Product · totolink.net