CVE-2025-55893:

Command injection vulnerability in TOTOLINK N200RE router firmware version V9.3.5u.6437_B20230519.

Score
A numerical rating that indicates how dangerous this vulnerability is.

6.5Medium

Published Date:Dec 15, 2025
CISA KEV Date:*No Data*
Industries Affected:20

Threat Predictions

EPSS Score:0.6
EPSS Percentile:69%

Exploitability

Score:2.8
Attack Vector:ADJACENT_NETWORK
Attack Complexity:LOW
Privileges Required:NONE
User Interaction:NONE
Scope:UNCHANGED

Impact

Score:3.6
Confidentiality Impact:NONE
Integrity Impact:HIGH
Availability Impact:NONE

Description Preview

Command injection vulnerability in TOTOLINK N200RE router firmware version V9.3.5u.6437_B20230519.

Overview

The vulnerability in TOTOLINK N200RE routers presents a significant security risk. With a CVSS v3.1 base score of 6.5 (Medium severity), the flaw requires no user interaction or privileges for exploitation. The attack vector is limited to adjacent networks, which somewhat restricts the potential scope of attacks. While the vulnerability does not impact confidentiality or availability, it poses a high risk to the integrity of the affected system. The weakness is classified as CWE-77, indicating a command injection vulnerability. This type of flaw often allows attackers to execute arbitrary commands on the host operating system, potentially leading to full system compromise.

Remediation

To address this vulnerability, users and administrators of TOTOLINK N200RE routers should take the following steps:
1. Check the current firmware version of your router.
2. Visit the official TOTOLINK website to see if a security update addressing this vulnerability is available.
3. If an update is available, download and install it following the manufacturer's instructions.
4. If no update is available, consider implementing additional security measures such as:
Restricting access to the router's management interface
Using strong, unique passwords
Disabling remote management features if not necessary
Monitoring for suspicious activities
5. Regularly check for firmware updates and apply them promptly to ensure ongoing protection against known vulnerabilities.