cbcvebase.

Iptime A1004 Firmware vulnerabilities

1 known vulnerability affecting iptime/a1004_firmware.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-55423P2CRITICALCVSS 9.8≥ 9.90.8, ≤ 12.16.22026-01-20
CVE-2025-55423 [CRITICAL] CWE-94 CVE-2025-55423: A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router mode A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() without proper validation or sanitization, allowing OS command injection.
nvd
Iptime A1004 Firmware vulnerabilities | cvebase