CVE-2025-55895: TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to…

CVE-2025-55895 · Severity: critical · CVSS 9.1 · Published 2025-12-15

TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attackers can send payloads to the interface without logging in (remote).

Technologies: TOTOLINK A3300R, TOTOLINK A3300r Firmware, TOTOLINK N200RE firmware. Vendors: TOTOLINK.

Quick answers

Is CVE-2025-55895 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2025-55895 being exploited in the wild.
How severe is CVE-2025-55895?
Critical severity, with a CVSS score of 9.1, published 15 December 2025.
Which products and versions are affected?
TOTOLINK A3300R, TOTOLINK A3300r Firmware, TOTOLINK N200re, TOTOLINK N200RE firmware. The advisory does not name versions.
Is there a fix for CVE-2025-55895?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
Am I affected by CVE-2025-55895?
Check whether you run TOTOLINK A3300R, TOTOLINK A3300r Firmware, TOTOLINK N200re or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Affected products

  • TOTOLINK A3300R
  • TOTOLINK A3300r Firmware
  • TOTOLINK N200re
  • TOTOLINK N200RE firmware

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.