Iptime
13 CVEs across 352 Iptime products. Browse Iptime vulnerabilities, severities, and proof-of-concept exploits.
Iptime products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-24498 | High | 7.5 | 2026-02-27 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Networks, Inc. IpTIME AX2004M, EFM-Networks, I… |
CVE-2026-1742 | Medium | 4.7 | 2026-02-02 | A vulnerability was identified in EFM ipTIME A8004T 14.18.2. Affected by this vulnerability is the function commit_vpncli_file_upload of the file /cgi/timepro… |
CVE-2026-1741 | Medium | 6.6 | 2026-02-02 | A vulnerability was determined in EFM ipTIME A8004T 14.18.2. Affected is the function httpcon_check_session_url of the file /sess-bin/d.cgi of the component De… |
CVE-2026-1740 | High | 7.3 | 2026-02-02 | A vulnerability was found in EFM ipTIME A8004T 14.18.2. This impacts the function httpcon_check_session_url of the file /cgi/timepro.cgi of the component Hidde… |
CVE-2025-55423 | Critical | 9.8 | 2026-01-20 | A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwardin… |
CVE-2025-50464 | Medium | 6.5 | 2025-07-30 | A buffer overflow vulnerability exists in the upload.cgi module of the iptime NAS firmware v1.5.04. The vulnerability arises due to the unsafe use of the strcp… |
CVE-2022-23771 | High | 8.0 | 2022-10-17 | This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of valid… |
CVE-2022-23765 | High | 8.0 | 2022-08-17 | This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers… |
CVE-2021-26620 | High | 7.5 | 2022-03-25 | An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attackers are able to steal important informa… |
CVE-2020-7879 | High | 8.8 | 2021-11-30 | This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME IP camera because th… |
CVE-2021-26614 | High | 7.5 | 2021-11-22 | ius_get.cgi in IpTime C200 camera allows remote code execution. A remote attacker may send a crafted parameters to the exposed vulnerable web service interface… |
CVE-2020-7847 | High | 7.4 | 2021-02-23 | The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code executi… |
CVE-2020-7848 | High | 8.0 | 2021-02-17 | The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can se… |