Vulnerabilities

TI-2026-61742 CVE-2026-90847 · GHSA-7cwj-49q5-wgwg

EFM ipTIME C200E System Setup iux_set.cgi os command injection

HIGH 76

A vulnerability was determined in EFM ipTIME C200E 1.094.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.0339 Published 2026-09-15 No fix listed CWE-77

TI-2026-54365 CVE-2026-78168 · GHSA-r2qf-9984-83jj

EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication

HIGH 81

A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01333 Published 2026-08-24 No fix listed CWE-287

TI-2026-54364 CVE-2026-78167 · GHSA-2hpc-g37m-pmw5

EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication

HIGH 82

A weakness has been identified in EFM ipTIME T16000M 14.20.2.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01478 Published 2026-08-24 No fix listed CWE-287

TI-2026-16198 CVE-2026-19977 · GHSA-6h4w-hx37-cqg3

EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication

HIGH 82

A vulnerability was detected in EFM ipTIME A3004T 14.19.0.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01333 Published 2026-08-17 No fix listed CWE-287

TI-2026-15813 CVE-2026-19379 · GHSA-6hpq-m5gp-6p39

EFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injection

HIGH 70

A vulnerability was determined in EFM ipTIME AX8004M 15.09.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.02032 Published 2026-08-10 No fix listed CWE-77

TI-2026-07255 CVE-2026-8234 · GHSA-hhfg-q3j6-485j

EFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based overflow

HIGH 73

A security vulnerability has been detected in EFM ipTIME A8004T 14.18.2.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00481 Published 2026-05-10 No fix listed CWE-119

TI-2026-06893 CVE-2026-7834 · GHSA-c384-mhv7-jvfr

EFM ipTIME NAS1dual misc_main.cgi get_csrf_whites stack-based overflow

HIGH 81

A security vulnerability has been detected in EFM ipTIME NAS1dual 1.5.24.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0063 Published 2026-05-05 No fix listed CWE-119

TI-2026-06892 CVE-2026-7833 · GHSA-m3xj-gqh8-33xm

EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection

HIGH 72

A weakness has been identified in EFM ipTIME C200 up to 1.092.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.03157 Published 2026-05-05 No fix listed CWE-74

TI-2026-19746 CVE-2026-24498 · GHSA-cr8p-gx5g-wjgh

Information disclosure in EFM ipTIME T5008

LOW 27

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00441 Published 2026-02-27 No fix listed CWE-200

TI-2026-02176 CVE-2026-2550 · GHSA-xj75-c4vf-wp8x

EFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted upload

HIGH 81

A vulnerability was found in EFM iptime A6004MX 14.18.2.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00731 Published 2026-02-16 No fix listed CWE-284

TI-2026-01425 CVE-2026-1742 · GHSA-p784-4wwh-rmh6

EFM ipTIME A8004T VPN Service timepro.cgi commit_vpncli_file_upload unrestricted upload

LOW 23

A vulnerability was identified in EFM ipTIME A8004T 14.18.2.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00382 Published 2026-02-02 No fix listed CWE-284

TI-2026-01424 CVE-2026-1741 · GHSA-p6m8-4rxr-8v7p

EFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoor

LOW 36

A vulnerability was determined in EFM ipTIME A8004T 14.18.2.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00756 Published 2026-02-02 No fix listed CWE-912

TI-2026-01423 CVE-2026-1740 · GHSA-33w6-9gm9-5rj4

EFM ipTIME A8004T Hidden Hiddenloginsetup timepro.cgi httpcon_check_session_url improper authentication

LOW 37

A vulnerability was found in EFM ipTIME A8004T 14.18.2.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00548 Published 2026-02-02 No fix listed CWE-287

TI-2025-35008 CVE-2025-55423 · GHSA-495m-v35r-f849

A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME…

MEDIUM 55

A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() withou…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03736 Published 2026-01-20 No fix listed CWE-94

TI-2025-13228 CVE-2025-14485 · GHSA-mrhv-3wcw-74fh

EFM ipTIME A3004T Administrator Password timepro.cgi show_debug_screen command injection

LOW 16

A weakness has been identified in EFM ipTIME A3004T 14.19.0.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.01807 Published 2025-12-11 No fix listed CWE-74

TI-2025-32135 CVE-2025-50464 · GHSA-rp2x-xfx4-4r2g

A buffer overflow vulnerability exists in the upload.cgi module of the iptime NAS…

HIGH 68

A buffer overflow vulnerability exists in the upload.cgi module of the iptime NAS firmware v1.5.04.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00541 Published 2025-07-30 No fix listed CWE-121

TI-2022-07807 CVE-2022-23771 · GHSA-whc8-p8h6-gp94

IPTIME NAS1DUAL CSRF Vulnerability

MEDIUM 40

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00329 Published 2022-10-17 Fixed in 1.4.86 CWE-352

TI-2022-07801 CVE-2022-23765 · GHSA-qhhg-q8wp-jjvj

IPTIME NAS family CSRF vulnerability

LOW 39

This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00493 Published 2022-08-17 Fixed in 1.4.86 CWE-352

TI-2021-08338 CVE-2021-26620 · GHSA-cc72-grgq-wvmx

IPTIME NAS2dual improper authentication vulnerability

LOW 36

An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0135 Published 2022-03-25 Fixed in 1.4.82 CWE-287

TI-2020-06383 CVE-2020-7879 · GHSA-54vf-jrm9-p98w

ipTIME C200 IP Camera command injection vulnerability

MEDIUM 45

This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01448 Published 2021-11-30 No fix listed CWE-78

TI-2021-08332 CVE-2021-26614 · GHSA-92m5-7gm4-grc4

IpTime C200 IP camera remote code execution vulnerability

MEDIUM 47

ius_get.cgi in IpTime C200 camera allows remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02535 Published 2021-11-22 No fix listed CWE-749

TI-2020-06355 CVE-2020-7847 · GHSA-vwm9-4mjh-m96x

Unrestricted file upload in EFM ipTIME NAS

LOW 35

The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00525 Published 2021-02-23 No fix listed CWE-434

TI-2020-06356 CVE-2020-7848 · GHSA-vmm9-vj5p-8xc9

Improper input validation in EFM ipTIME C200 IP Camera

LOW 37

The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01136 Published 2021-02-17 No fix listed CWE-20

Vulnerabilities

Filters