Iptime N2plus Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Iptime N2plus Firmware: 1 record(s), with affected versions and fixes.
cpe:2.3:o:iptime:n2plus_firmware

CVE-2025-55423 Critical · 9.8 CWE-94 Jan 20, 2026

Code Injection in Iptime N104s-r1 Firmware

A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() without proper validation or sanitization, allowing OS command injection.