PT-2025-51256 · Totolink · Totolink A3300R
CVE-2025-55901
·
Publicado
2025-12-15
·
Atualizado
2025-12-21
CVSS v3.1
6.5
Média
| Vetor | AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
TOTOLINK A3300R version V17.0.0cu.596 B20250515
Description
The TOTOLINK A3300R router firmware contains a command injection flaw in the
NTPSyncWithHost function. The issue is triggered through the host time parameter. This allows for potential unauthorized command execution on the device.Recommendations
Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the
NTPSyncWithHost function until a patch is available.Exploit
Correção
Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Totolink A3300R