Skip to content
OpenAdvisories

Vendor

EFM

13 known vulnerabilities.

Products

ipTIME A8004T 4 ipTIME A3004T 2 ipTIME T24000M 1 ipTIME T16000M 1 ipTIME NAS1dual 1 iptime A6004MX 1 ipTIME C200 1 ipTIME AX8004M 1 ipTIME C200E 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.3
    CVE-2026-19379

    EFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injection

    A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument fname causes os command injection. The attack can be initiated remotely. The e…

    EFM ipTIME AX8004M
  • High 8.8
    CVE-2026-8234

    EFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based overflow

    A security vulnerability has been detected in EFM ipTIME A8004T 14.18.2. This vulnerability affects the function formWifiBasicSet of the file /goform/WifiBasicSet. The manipulation of the argument security_5g leads to stack-based buffer overflow. The attack m…

    EFM ipTIME A8004T
  • High 7.2
    CVE-2026-7833

    EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection

    A weakness has been identified in EFM ipTIME C200 up to 1.092. This vulnerability affects the function sub_408F90 of the file /cgi/iux_set.cgi of the component ApplyRestore Endpoint. This manipulation of the argument RestoreFile causes command injection. The …

    EFM ipTIME C200
  • High 7.3
    CVE-2026-1740

    EFM ipTIME A8004T Hidden Hiddenloginsetup timepro.cgi httpcon_check_session_url improper authentication

    A vulnerability was found in EFM ipTIME A8004T 14.18.2. This impacts the function httpcon_check_session_url of the file /cgi/timepro.cgi of the component Hidden Hiddenloginsetup Interface. The manipulation results in improper authentication. The attack may be…

    EFM ipTIME A8004T