Vulnerabilidades de EFM
CVEs publicadas que afetam produtos de EFM: 10 registro(s), com severidade, exploração e correções.
ipTIME A8004T 4iptime A6004MX 1ipTIME NAS1dual 1ipTIME T24000M 1ipTIME T16000M 1ipTIME C200 1ipTIME A3004T 1
CVE-2026-78168
Crítica · 9.8
CWE-287 23/08/2026
EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication
A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_session_url of the component Session Validation Handler. Such manipulation leads to improper authentication. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-78167
Crítica · 10.0
CWE-287 23/08/2026
EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication
A weakness has been identified in EFM ipTIME T16000M 14.20.2. The impacted element is the function httpcon_check_session_url of the component Session Validation Handler. This manipulation causes improper authentication. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-8234
Alta · 8.8
CWE-119 10/05/2026
EFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based overflow
A security vulnerability has been detected in EFM ipTIME A8004T 14.18.2. This vulnerability affects the function formWifiBasicSet of the file /goform/WifiBasicSet. The manipulation of the argument security_5g leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-7834
Crítica · 9.8
CWE-119 05/05/2026
Estouro de buffer baseado em pilha no EFM ipTIME NAS1dual em misc_main.cgi (CVE-2026-7834)
Foi detectada uma vulnerabilidade de segurança no EFM ipTIME NAS1dual 1.5.24. O problema afeta a função get_csrf_whites do arquivo /cgi/advanced/misc_main.cgi. Essa manipulação leva a um estouro de buffer baseado em pilha. O ataque pode ser realizado remotamente. O exploit foi divulgado publicamente e pode ser utilizado. O fornecedor foi contatado previamente sobre esta divulgação, mas não respondeu de nenhuma forma.
CVE-2026-7833
Alta · 7.2
CWE-74 05/05/2026
EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection
A weakness has been identified in EFM ipTIME C200 up to 1.092. This vulnerability affects the function sub_408F90 of the file /cgi/iux_set.cgi of the component ApplyRestore Endpoint. This manipulation of the argument RestoreFile causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-2550
Crítica · 9.8
CWE-284 16/02/2026
EFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted upload
A vulnerability was found in EFM iptime A6004MX 14.18.2. Affected is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-1742
Alta · 7.2
CWE-434 02/02/2026
EFM ipTIME A8004T VPN Service timepro.cgi commit_vpncli_file_upload unrestricted upload
A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi of the component VPN Service. Such manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-1741
Média · 6.6
CWE-912 02/02/2026
EFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoor
A vulnerability was determined in EFM ipTIME A8004T 14.18.2. Affected is the function httpcon_check_session_url of the file /sess-bin/d.cgi of the component Debug Interface. This manipulation of the argument cmd causes backdoor. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-1740
Crítica · 9.8
CWE-287 02/02/2026
Autenticação Inadequada no Firmware EFM ipTIME A8004T na Verificação de Sessão (CVE-2026-1740)
Foi encontrada uma vulnerabilidade no EFM ipTIME A8004T 14.18.2. Ela afeta a função httpcon_check_session_url do arquivo /cgi/timepro.cgi do componente Hidden Hiddenloginsetup Interface. A manipulação resulta em autenticação inadequada. O ataque pode ser realizado remotamente. O exploit foi tornado público e pode ser utilizado. O fabricante foi contatado antecipadamente sobre esta divulgação, mas não respondeu de nenhuma forma.
CVE-2025-14485
Média · 5.0
CWE-74 11/12/2025
EFM ipTIME A3004T Administrator Password timepro.cgi show_debug_screen command injection
A weakness has been identified in EFM ipTIME A3004T 14.19.0. This vulnerability affects the function show_debug_screen of the file /sess-bin/timepro.cgi of the component Administrator Password Handler. This manipulation of the argument aaksjdkfj with the input !@dnjsrureljrm*& causes command injection. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is stated that the exploitability is difficult. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.