Vendors / EFM Records 23 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 9
CVSS high 8
Exploited now EFM records in CISA KEV No EFM vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 55
A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() withou…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03736 · Published 2026-01-20 · No fix listed CWE-94
Priority LOW 37
A vulnerability was found in EFM ipTIME A8004T 14.18.2.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00548 · Published 2026-02-02 · No fix listed CWE-287
Priority LOW 36
A vulnerability was determined in EFM ipTIME A8004T 14.18.2.
CVSS 4.0 HIGH 7.5· Network · High privileges · No interaction · EPSS 0.00756 · Published 2026-02-02 · No fix listed CWE-912
Priority LOW 23
A vulnerability was identified in EFM ipTIME A8004T 14.18.2.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00382 · Published 2026-02-02 · No fix listed CWE-284
Open these records in search → All records by CVSS severity
9 8 5 1 0
