CVE-2025-55895: Improper Access Control
Source CVE Database V5
Not known to be exploited · CVSS 9.1 Critical.
Data as of 26 Oct 2026, 09:15 UTC
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 27% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NExploitation evidence
Disclosed: evidence found.
CVE published 15 Dec 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
1. Immediately inventory and identify all TOTOLINK A3300R and N200RE routers within the network to assess exposure. 2. Monitor vendor communications closely for firmware updates addressing CVE-2025-55895 and apply patches promptly once available. 3. Until patches are released, disable remote management interfaces or restrict access to trusted IP addresses via firewall rules to prevent unauthorized external access. 4. Implement network segmentation to isolate vulnerable devices from critical systems and sensitive data. 5. Employ intrusion detection and prevention systems (IDS/IPS) with signatures or anomaly detection tuned to identify suspicious payloads targeting router management interfaces. 6. Regularly audit router configurations for unauthorized changes and enable logging to detect exploitation attempts. 7. Educate IT staff on this vulnerability and ensure incident response plans include steps for potential exploitation scenarios. 8. Consider deploying network access control (NAC) solutions to enforce device compliance and limit exposure. 9. For organizations using these routers in remote or branch offices, evaluate alternative secure VPN or management solutions to reduce reliance on vulnerable devices. 10. Engage with TOTOLINK support channels for guidance and early access to security patches or mitigations.
Description
TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attackers can send payloads to the interface without logging in (remote).