CVE-2025-55901
Medium · 6.5CVSS
6.5
EPSS
1.1%
Published
Dec 15, 2025
CISA due date
—
The record
TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|