CVE-2025-55901
TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.
Published Dec 15, 2025 · updated Oct 14, 2026 · totolink a3300r firmware
TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.
Timeline
Detection, updates, and resolution for this record.
Dec 15, 2025 · NIST NVD
Detected
TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.
Oct 14, 2026 · NIST NVD
Updated
TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.
Affected
- cpe totolink/a3300r firmware17.0.0cu.596_b20250515
Sources
- CVE.orgCVE-2025-55901
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-55901
30-day exploitation probability 1.1%
first.org - NIST NVDCVE-2025-55901
TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.
nvd.nist.gov