← All advisories

Medium severity6.5NVD Advisory· Published Dec 15, 2025· Updated Jun 17, 2026

CVE-2025-55901

CVE-2025-55901

Description

TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Totolink/A3300r Firmware
cpe:2.3:o:totolink:a3300r_firmware:17.0.0cu.596_b20250515:*:*:*:*:*:*:*
Totolink/A3300Rcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: V17.0.0cu.596_B20250515

Patches

Vulnerability mechanics

References

2

github.com/l0tk3/CVES/blob/main/CVE-2025-55901.pdfnvdExploitThird Party Advisory
www.totolink.netnvdProduct

News mentions

0

No linked articles in our index yet.