# CVE-2025-55893: TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName.

Source: https://junglewise.ai/threats/cve-2025-55893-totolink-n200re-v9-3-5u-6437-b20230519-is-vulnerable-to-command  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-15  
License: CC BY 4.0 with a link back

CVE-2025-55893 · Severity: medium · CVSS 6.5 · Published 2025-12-15

TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName.

Technologies: [TOTOLINK N200RE firmware](https://junglewise.ai/threats/technologies/n200re-firmware). Vendors: [TOTOLINK](https://junglewise.ai/threats/vendors/totolink).

## Quick answers

**Is CVE-2025-55893 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-55893 being exploited in the wild.

**How severe is CVE-2025-55893?** Medium severity, with a CVSS score of 6.5, published 15 December 2025.

**Which products and versions are affected?** TOTOLINK N200re, TOTOLINK N200RE firmware. The advisory does not name versions.

**Is there a fix for CVE-2025-55893?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-55893?** Check whether you run TOTOLINK N200re or TOTOLINK N200RE firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- TOTOLINK N200re
- TOTOLINK N200RE firmware

## Related threats

- [TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to…](https://junglewise.ai/threats/cve-2025-55895-totolink-a3300r-v17-0-0cu-557-b20221024-and-n200re-v9-3-5u-6448)
- [TOTOLINK EX1200T and N200RE authentication bypass in formLoginAuth.htm](https://junglewise.ai/threats/cve-2025-51451-totolink-ex1200t-and-n200re-authentication-bypass-in)