Skip to content
OpenAdvisories

Vendor

EFM

13 known vulnerabilities.

Products

ipTIME A8004T 4 ipTIME A3004T 2 ipTIME T24000M 1 ipTIME T16000M 1 ipTIME NAS1dual 1 iptime A6004MX 1 ipTIME C200 1 ipTIME AX8004M 1 ipTIME C200E 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-1742

    EFM ipTIME A8004T VPN Service timepro.cgi commit_vpncli_file_upload unrestricted upload

    A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi of the component VPN Service. Such manipulation leads to unrestricted upload. It is possible to …

    EFM ipTIME A8004T
  • Medium 6.6
    CVE-2026-1741

    EFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoor

    A vulnerability was determined in EFM ipTIME A8004T 14.18.2. Affected is the function httpcon_check_session_url of the file /sess-bin/d.cgi of the component Debug Interface. This manipulation of the argument cmd causes backdoor. It is possible to initiate the…

    EFM ipTIME A8004T
  • Medium 5.0
    CVE-2025-14485

    EFM ipTIME A3004T Administrator Password timepro.cgi show_debug_screen command injection

    A weakness has been identified in EFM ipTIME A3004T 14.19.0. This vulnerability affects the function show_debug_screen of the file /sess-bin/timepro.cgi of the component Administrator Password Handler. This manipulation of the argument aaksjdkfj with the inpu…

    EFM ipTIME A3004T