Base Score

MEDIUM6.5

CVE-2025-55893

TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName.

VectorADJACENT_NETWORK

Published Bycve@mitre.org

Published DateDec 15, 2025, 17:15

Weakness Type (CWE):CWE-77

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

ADJACENT_NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

HIGH

Availability (A)

NONE

References

https://github.com/l0tk3/CVES/blob/main/CVE-2025-55893.pdf
https://www.totolink.net/

Base Score

MEDIUM6.5

Weakness Type (CWE):CWE-77

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

ADJACENT_NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

HIGH

Availability (A)

NONE