A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() without proper validation or sanitization, allowing OS command injection.
History

Fri, 30 Jan 2026 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Iptime a1
Iptime a1004
Iptime a1004 Firmware
Iptime a1004ns
Iptime a1004ns Firmware
Iptime a1004v
Iptime a1004v Firmware
Iptime a104
Iptime a104 Firmware
Iptime a104ns
Iptime a104ns Firmware
Iptime a104r
Iptime a104r Firmware
Iptime a1 Firmware
Iptime a2003mu
Iptime a2003mu Firmware
Iptime a2003ns-mu Firmware
Iptime a2004
Iptime a2004 Firmware
Iptime a2004mu Firmware
Iptime a2004ns
Iptime a2004ns-mu Firmware
Iptime a2004ns-r
Iptime a2004ns-r Firmware
Iptime a2004ns Firmware
Iptime a2004nsplus
Iptime a2004nsplus Firmware
Iptime a2004plus
Iptime a2004plus Firmware
Iptime a2004r
Iptime a2004r Firmware
Iptime a2004se
Iptime a2004se Firmware
Iptime a2008
Iptime a2008 Firmware
Iptime a3
Iptime a3002mesh
Iptime a3002mesh Firmware
Iptime a3003ns
Iptime a3003ns Firmware
Iptime a3004
Iptime a3004-dual
Iptime a3004-dual Firmware
Iptime a3004 Firmware
Iptime a3004m
Iptime a3004m Firmware
Iptime a3004ns
Iptime a3004ns-bcm
Iptime a3004ns-bcm Firmware
Iptime a3004ns-dual
Iptime a3004ns-dual Firmware
Iptime a3004ns-m Firmware
Iptime a3004ns Firmware
Iptime a3004t
Iptime a3004t Firmware
Iptime a3004tw
Iptime a3004tw Firmware
Iptime a3008-mu Firmware
Iptime a304 Firmware
Iptime a3 Firmware
Iptime a5004ns
Iptime a5004ns-m Firmware
Iptime a5004ns Firmware
Iptime a6004mx
Iptime a6004mx Firmware
Iptime a6004ns
Iptime a6004ns-m
Iptime a6004ns-m Firmware
Iptime a6004ns Firmware
Iptime a604
Iptime a604-v3 Firmware
Iptime a604-v5 Firmware
Iptime a604 Firmware
Iptime a604g-mu Firmware
Iptime a604g-skylife Firmware
Iptime a604m Firmware
Iptime a604mu
Iptime a604mu Firmware
Iptime a604r Firmware
Iptime a604se
Iptime a604se Firmware
Iptime a604v
Iptime a604v Firmware
Iptime a6ns-m Firmware
Iptime a7004m Firmware
Iptime a704ns-bcm
Iptime a704ns-bcm Firmware
Iptime a7ns
Iptime a7ns Firmware
Iptime a8004bcm Firmware
Iptime a8004itl Firmware
Iptime a8004ns-m
Iptime a8004ns-m Firmware
Iptime a8004t-xr Firmware
Iptime a8004t Firmware
Iptime a804ns-mu Firmware
Iptime a8ns-m Firmware
Iptime a9004m-x2 Firmware
Iptime a9004m Firmware
Iptime ax11000
Iptime ax11000 Firmware
Iptime ax2002mesh
Iptime ax2002mesh Firmware
Iptime ax2004
Iptime ax2004 Firmware
Iptime ax2004bcm
Iptime ax2004bcm Firmware
Iptime ax2004m
Iptime ax2004m Firmware
Iptime ax3004bcm
Iptime ax3004bcm Firmware
Iptime ax3004itl Firmware
Iptime ax8004bcm Firmware
Iptime ax8004m
Iptime ax8004m Firmware
Iptime ax8008m
Iptime ax8008m Firmware
Iptime ew302n
Iptime ew302n Firmware
Iptime n102e Firmware
Iptime n102eplus
Iptime n102eplus Firmware
Iptime n102i Firmware
Iptime n102iplus
Iptime n102iplus Firmware
Iptime n104 Black
Iptime n104 Black Firmware
Iptime n104e Firmware
Iptime n104eplus
Iptime n104eplus Firmware
Iptime n104k
Iptime n104k Firmware
Iptime n104plus
Iptime n104plus-i
Iptime n104plus-i Firmware
Iptime n104plus Firmware
Iptime n104q
Iptime n104q-i
Iptime n104q-i Firmware
Iptime n104q Firmware
Iptime n104r
Iptime n104r Firmware
Iptime n104s-r1
Iptime n104s-r1 Firmware
Iptime n104v
Iptime n104v Firmware
Iptime n1e
Iptime n1e Firmware
Iptime n1plus
Iptime n1plus-i
Iptime n1plus-i Firmware
Iptime n1plus Firmware
Iptime n1v Firmware
Iptime n2e
Iptime n2e Firmware
Iptime n2eplus
Iptime n2eplus Firmware
Iptime n2plus
Iptime n2plus-i
Iptime n2plus-i Firmware
Iptime n2plus Firmware
Iptime n2v Firmware
Iptime n2vs
Iptime n2vs Firmware
Iptime n3
Iptime n3-i
Iptime n3-i Firmware
Iptime n3 Firmware
Iptime n5
Iptime n5-i
Iptime n5-i Firmware
Iptime n5 Firmware
Iptime n6
Iptime n6004r
Iptime n6004r Firmware
Iptime n600 Firmware
Iptime n602e Firmware
Iptime n602eplus
Iptime n602eplus Firmware
Iptime n602se
Iptime n602se Firmware
Iptime n604 Black
Iptime n604 Black Firmware
Iptime n604a
Iptime n604a Firmware
Iptime n604e Firmware
Iptime n604eplus
Iptime n604eplus Firmware
Iptime n604plus
Iptime n604plus-i
Iptime n604plus-i Firmware
Iptime n604plus Firmware
Iptime n604r
Iptime n604r Firmware
Iptime n604rplus
Iptime n604rplus-i
Iptime n604rplus-i Firmware
Iptime n604rplus Firmware
Iptime n604s
Iptime n604s Firmware
Iptime n604se
Iptime n604se Firmware
Iptime n604t
Iptime n604t Firmware
Iptime n604tplus
Iptime n604tplus Firmware
Iptime n604v
Iptime n604v Firmware
Iptime n604vplus
Iptime n604vplus Firmware
Iptime n6 Firmware
Iptime n7004ns
Iptime n7004ns Firmware
Iptime n702bcm
Iptime n702bcm Firmware
Iptime n702e Firmware
Iptime n702eplus
Iptime n702eplus Firmware
Iptime n702r Firmware
Iptime n704-a3
Iptime n704-a3 Firmware
Iptime n704bcm
Iptime n704bcm Firmware
Iptime n704e Firmware
Iptime n704eplus
Iptime n704eplus Firmware
Iptime n704ns
Iptime n704ns Firmware
Iptime n704qca Firmware
Iptime n704v3
Iptime n704v3 Firmware
Iptime n8004r
Iptime n8004r Firmware
Iptime n8004v
Iptime n8004v Firmware
Iptime n804
Iptime n804 Firmware
Iptime n804a
Iptime n804a3
Iptime n804a3 Firmware
Iptime n804a Firmware
Iptime n804r Firmware
Iptime n804t
Iptime n804t3
Iptime n804t3 Firmware
Iptime n804t Firmware
Iptime n804v
Iptime n804v Firmware
Iptime n904
Iptime n904 Firmware
Iptime n904ns
Iptime n904ns Firmware
Iptime n904plus
Iptime n904plus Firmware
Iptime n904v
Iptime n904v Firmware
Iptime q1
Iptime q1 Firmware
Iptime q304
Iptime q304 Firmware
Iptime q504
Iptime q504 Firmware
Iptime q604
Iptime q604 Firmware
Iptime smart
Iptime smart Firmware
Iptime t16000
Iptime t16000 Firmware
Iptime t16000m
Iptime t16000m Firmware
Iptime t24000
Iptime t24000 Firmware
Iptime t24000m
Iptime t24000m Firmware
Iptime t3004
Iptime t3004 Firmware
Iptime t3008
Iptime t3008 Firmware
Iptime t5004 Firmware
Iptime t5008 Firmware
Iptime v304
Iptime v304 Firmware
Iptime v504
Iptime v504 Firmware
Iptime v508 Firmware
CPEs cpe:2.3:h:iptime:a1004:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a1004ns:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a1004v:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a104:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a104ns:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a104r:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a1:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a2003mu:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a2003ns-mu:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a2004:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a2004mu:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a2004ns-mu:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a2004ns-r:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a2004ns:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a2004nsplus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a2004plus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a2004r:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a2004se:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a2008:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a3002mesh:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a3003ns:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a3004-dual:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a3004:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a3004m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a3004ns-bcm:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a3004ns-dual:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a3004ns-m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a3004ns:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a3004t:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a3004tw:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a3008-mu:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a304:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a3:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a5004ns-m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a5004ns:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a6004mx:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a6004ns-m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a6004ns:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a604-v3:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a604-v5:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a604:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a604g-mu:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a604g-skylife:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a604m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a604mu:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a604r:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a604se:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a604v:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a6ns-m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a7004m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a704ns-bcm:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a7ns:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a8004bcm:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a8004itl:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a8004ns-m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a8004t-xr:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a8004t:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a804ns-mu:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a8ns-m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a9004m-x2:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:a9004m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:ax11000:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:ax2002mesh:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:ax2004:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:ax2004bcm:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:ax2004m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:ax3004bcm:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:ax3004itl:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:ax8004bcm:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:ax8004m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:ax8008m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:ew302n:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n102e:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n102eplus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n102i:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n102iplus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n104_black:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n104e:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n104eplus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n104k:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n104plus-i:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n104plus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n104q-i:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n104q:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n104r:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n104s-r1:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n104v:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n1e:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n1plus-i:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n1plus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n1v:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n2e:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n2eplus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n2plus-i:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n2plus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n2v:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n2vs:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n3-i:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n3:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n5-i:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n5:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n6004r:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n600:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n602e:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n602eplus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n602se:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604_black:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604a:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604e:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604eplus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604plus-i:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604plus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604r:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604rplus-i:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604rplus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604s:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604se:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604t:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604tplus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604v:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n604vplus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n6:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n7004ns:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n702bcm:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n702e:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n702eplus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n702r:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n704-a3:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n704bcm:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n704e:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n704eplus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n704ns:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n704qca:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n704v3:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n8004r:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n8004v:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n804:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n804a3:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n804a:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n804r:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n804t3:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n804t:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n804v:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n904:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n904ns:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n904plus:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:n904v:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:q1:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:q304:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:q504:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:q604:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:smart:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:t16000:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:t16000m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:t24000:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:t24000m:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:t3004:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:t3008:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:t5004:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:t5008:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:v304:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:v504:-:*:*:*:*:*:*:*
cpe:2.3:h:iptime:v508:-:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a1004_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a1004ns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a1004v_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a104_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a104ns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a104r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a104r_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a2003mu_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a2003ns-mu_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a2004_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a2004mu_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a2004ns-mu_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a2004ns-r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a2004ns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a2004nsplus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a2004plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a2004r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a2004se_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a2008_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a3002mesh_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a3003ns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a3004-dual_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a3004_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a3004m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a3004ns-bcm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a3004ns-dual_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a3004ns-m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a3004ns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a3004t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a3004tw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a3008-mu_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a304_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a5004ns-m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a5004ns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a6004mx_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a6004ns-m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a6004ns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a604-v3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a604-v5_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a604_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a604g-mu_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a604g-skylife_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a604m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a604mu_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a604r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a604se_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a604v_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a6ns-m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a7004m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a704ns-bcm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a7ns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a8004bcm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a8004itl_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a8004ns-m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a8004t-xr_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a8004t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a804ns-mu_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a8ns-m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a9004m-x2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:a9004m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:ax11000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:ax2002mesh_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:ax2004_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:ax2004bcm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:ax2004m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:ax3004bcm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:ax3004itl_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:ax8004bcm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:ax8004m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:ax8008m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:ew302n_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n102e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n102eplus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n102i_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n102iplus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n104_black_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n104e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n104eplus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n104k_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n104plus-i_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n104plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n104q-i_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n104q_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n104r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n104s-r1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n104v_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n1e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n1plus-i_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n1plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n1v_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n2e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n2eplus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n2plus-i_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n2plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n2v_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n2vs_firmware:12.16.8:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n3-i_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n5-i_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n5_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n6004r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n600_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n602e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n602eplus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n602se_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604_black_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604eplus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604plus-i_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604rplus-i_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604rplus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604se_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604tplus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604v_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n604vplus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n6_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n7004ns_firmware:9.91.2:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n702bcm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n702e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n702eplus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n702r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n704-a3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n704bcm_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n704e_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n704eplus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n704ns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n704qca_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n704v3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n8004r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n8004v_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n804_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n804a3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n804a_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n804r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n804t3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n804t_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n804v_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n904_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n904ns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n904plus_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:n904v_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:q1_firmware:9.91.2:*:*:*:*:*:*:*
cpe:2.3:o:iptime:q304_firmware:9.91.2:*:*:*:*:*:*:*
cpe:2.3:o:iptime:q504_firmware:9.91.2:*:*:*:*:*:*:*
cpe:2.3:o:iptime:q604_firmware:9.91.2:*:*:*:*:*:*:*
cpe:2.3:o:iptime:smart_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:t16000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:t16000m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:t24000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:t24000m_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:t3004_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:t3008_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:t5004_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:t5008_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:v304_firmware:9.91.2:*:*:*:*:*:*:*
cpe:2.3:o:iptime:v504_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:iptime:v508_firmware:*:*:*:*:*:*:*:*
Vendors & Products Iptime a1
Iptime a1004
Iptime a1004 Firmware
Iptime a1004ns
Iptime a1004ns Firmware
Iptime a1004v
Iptime a1004v Firmware
Iptime a104
Iptime a104 Firmware
Iptime a104ns
Iptime a104ns Firmware
Iptime a104r
Iptime a104r Firmware
Iptime a1 Firmware
Iptime a2003mu
Iptime a2003mu Firmware
Iptime a2003ns-mu Firmware
Iptime a2004
Iptime a2004 Firmware
Iptime a2004mu Firmware
Iptime a2004ns
Iptime a2004ns-mu Firmware
Iptime a2004ns-r
Iptime a2004ns-r Firmware
Iptime a2004ns Firmware
Iptime a2004nsplus
Iptime a2004nsplus Firmware
Iptime a2004plus
Iptime a2004plus Firmware
Iptime a2004r
Iptime a2004r Firmware
Iptime a2004se
Iptime a2004se Firmware
Iptime a2008
Iptime a2008 Firmware
Iptime a3
Iptime a3002mesh
Iptime a3002mesh Firmware
Iptime a3003ns
Iptime a3003ns Firmware
Iptime a3004
Iptime a3004-dual
Iptime a3004-dual Firmware
Iptime a3004 Firmware
Iptime a3004m
Iptime a3004m Firmware
Iptime a3004ns
Iptime a3004ns-bcm
Iptime a3004ns-bcm Firmware
Iptime a3004ns-dual
Iptime a3004ns-dual Firmware
Iptime a3004ns-m Firmware
Iptime a3004ns Firmware
Iptime a3004t
Iptime a3004t Firmware
Iptime a3004tw
Iptime a3004tw Firmware
Iptime a3008-mu Firmware
Iptime a304 Firmware
Iptime a3 Firmware
Iptime a5004ns
Iptime a5004ns-m Firmware
Iptime a5004ns Firmware
Iptime a6004mx
Iptime a6004mx Firmware
Iptime a6004ns
Iptime a6004ns-m
Iptime a6004ns-m Firmware
Iptime a6004ns Firmware
Iptime a604
Iptime a604-v3 Firmware
Iptime a604-v5 Firmware
Iptime a604 Firmware
Iptime a604g-mu Firmware
Iptime a604g-skylife Firmware
Iptime a604m Firmware
Iptime a604mu
Iptime a604mu Firmware
Iptime a604r Firmware
Iptime a604se
Iptime a604se Firmware
Iptime a604v
Iptime a604v Firmware
Iptime a6ns-m Firmware
Iptime a7004m Firmware
Iptime a704ns-bcm
Iptime a704ns-bcm Firmware
Iptime a7ns
Iptime a7ns Firmware
Iptime a8004bcm Firmware
Iptime a8004itl Firmware
Iptime a8004ns-m
Iptime a8004ns-m Firmware
Iptime a8004t-xr Firmware
Iptime a8004t Firmware
Iptime a804ns-mu Firmware
Iptime a8ns-m Firmware
Iptime a9004m-x2 Firmware
Iptime a9004m Firmware
Iptime ax11000
Iptime ax11000 Firmware
Iptime ax2002mesh
Iptime ax2002mesh Firmware
Iptime ax2004
Iptime ax2004 Firmware
Iptime ax2004bcm
Iptime ax2004bcm Firmware
Iptime ax2004m
Iptime ax2004m Firmware
Iptime ax3004bcm
Iptime ax3004bcm Firmware
Iptime ax3004itl Firmware
Iptime ax8004bcm Firmware
Iptime ax8004m
Iptime ax8004m Firmware
Iptime ax8008m
Iptime ax8008m Firmware
Iptime ew302n
Iptime ew302n Firmware
Iptime n102e Firmware
Iptime n102eplus
Iptime n102eplus Firmware
Iptime n102i Firmware
Iptime n102iplus
Iptime n102iplus Firmware
Iptime n104 Black
Iptime n104 Black Firmware
Iptime n104e Firmware
Iptime n104eplus
Iptime n104eplus Firmware
Iptime n104k
Iptime n104k Firmware
Iptime n104plus
Iptime n104plus-i
Iptime n104plus-i Firmware
Iptime n104plus Firmware
Iptime n104q
Iptime n104q-i
Iptime n104q-i Firmware
Iptime n104q Firmware
Iptime n104r
Iptime n104r Firmware
Iptime n104s-r1
Iptime n104s-r1 Firmware
Iptime n104v
Iptime n104v Firmware
Iptime n1e
Iptime n1e Firmware
Iptime n1plus
Iptime n1plus-i
Iptime n1plus-i Firmware
Iptime n1plus Firmware
Iptime n1v Firmware
Iptime n2e
Iptime n2e Firmware
Iptime n2eplus
Iptime n2eplus Firmware
Iptime n2plus
Iptime n2plus-i
Iptime n2plus-i Firmware
Iptime n2plus Firmware
Iptime n2v Firmware
Iptime n2vs
Iptime n2vs Firmware
Iptime n3
Iptime n3-i
Iptime n3-i Firmware
Iptime n3 Firmware
Iptime n5
Iptime n5-i
Iptime n5-i Firmware
Iptime n5 Firmware
Iptime n6
Iptime n6004r
Iptime n6004r Firmware
Iptime n600 Firmware
Iptime n602e Firmware
Iptime n602eplus
Iptime n602eplus Firmware
Iptime n602se
Iptime n602se Firmware
Iptime n604 Black
Iptime n604 Black Firmware
Iptime n604a
Iptime n604a Firmware
Iptime n604e Firmware
Iptime n604eplus
Iptime n604eplus Firmware
Iptime n604plus
Iptime n604plus-i
Iptime n604plus-i Firmware
Iptime n604plus Firmware
Iptime n604r
Iptime n604r Firmware
Iptime n604rplus
Iptime n604rplus-i
Iptime n604rplus-i Firmware
Iptime n604rplus Firmware
Iptime n604s
Iptime n604s Firmware
Iptime n604se
Iptime n604se Firmware
Iptime n604t
Iptime n604t Firmware
Iptime n604tplus
Iptime n604tplus Firmware
Iptime n604v
Iptime n604v Firmware
Iptime n604vplus
Iptime n604vplus Firmware
Iptime n6 Firmware
Iptime n7004ns
Iptime n7004ns Firmware
Iptime n702bcm
Iptime n702bcm Firmware
Iptime n702e Firmware
Iptime n702eplus
Iptime n702eplus Firmware
Iptime n702r Firmware
Iptime n704-a3
Iptime n704-a3 Firmware
Iptime n704bcm
Iptime n704bcm Firmware
Iptime n704e Firmware
Iptime n704eplus
Iptime n704eplus Firmware
Iptime n704ns
Iptime n704ns Firmware
Iptime n704qca Firmware
Iptime n704v3
Iptime n704v3 Firmware
Iptime n8004r
Iptime n8004r Firmware
Iptime n8004v
Iptime n8004v Firmware
Iptime n804
Iptime n804 Firmware
Iptime n804a
Iptime n804a3
Iptime n804a3 Firmware
Iptime n804a Firmware
Iptime n804r Firmware
Iptime n804t
Iptime n804t3
Iptime n804t3 Firmware
Iptime n804t Firmware
Iptime n804v
Iptime n804v Firmware
Iptime n904
Iptime n904 Firmware
Iptime n904ns
Iptime n904ns Firmware
Iptime n904plus
Iptime n904plus Firmware
Iptime n904v
Iptime n904v Firmware
Iptime q1
Iptime q1 Firmware
Iptime q304
Iptime q304 Firmware
Iptime q504
Iptime q504 Firmware
Iptime q604
Iptime q604 Firmware
Iptime smart
Iptime smart Firmware
Iptime t16000
Iptime t16000 Firmware
Iptime t16000m
Iptime t16000m Firmware
Iptime t24000
Iptime t24000 Firmware
Iptime t24000m
Iptime t24000m Firmware
Iptime t3004
Iptime t3004 Firmware
Iptime t3008
Iptime t3008 Firmware
Iptime t5004 Firmware
Iptime t5008 Firmware
Iptime v304
Iptime v304 Firmware
Iptime v504
Iptime v504 Firmware
Iptime v508 Firmware

Wed, 21 Jan 2026 15:15:00 +0000

Type Values Removed Values Added
Description ipTIME routers A2003NS-MU 10.00.6 to 12.16.2 , N600 10.00.8 to 12.16.2, A604-V3 10.01.6 to 10.07.2, A6ns-M 10.01.6 to 14.19.4 , V508 10.02.2 to 10.06.4, N704QCA 10.02.4 to 12.16.2, A8ns-M 10.03.2 to 14.19.4, A304 10.05.4 to 10.07.4, A3004NS-M,A5004NS-M,A9004M 10.05.4 to 14.19.4, N702R 10.05.8 to 10.06.8, A604M 10.06.4 to 10.07.2, A804NS-MU 10.06.4 to 12.10.2, N804R 10.06.4 to 12.16.2, A7004M,A8004T 10.06.8 to 14.19.4, A604G-MU 10.07.4 to 12.16.2, A3008-MU 10.08.4 to 14.19.4, A2004MU and A2004NS-MU 10.08.6 to 12.17.0, A604-V5,A604R, N702E 10.09.2 to 12.16.2, N2V 10.09.2 to 12.16.8, N604E 10.09.2 to 14.19.4, N104E 10.09.4 to 12.15.2, A8004ITL 11.00.4 to 14.19.4, N102E 11.00.8 to 12.15.2, N1V 11.01.2 to 12.07.6, N102i 11.01.2 to 12.15.2, T5004 11.96.4 to 14.19.4, N602E 11.96.6 to 12.16.8, AX8004BCM and A8004T-XR 11.97.2 to 14.19.4, A9004M-X2, T5008 11.98.2 to 14.19.4, N704E 11.98.4 to 12.16.2, A8004BCM 11.99.1 to 12.16.2, AX3004ITL 12.01.2 to 14.19.4 and A604G-skylife 12.02.4 to 12.12 were discovered to contain an OS command injection vulnerability via the function upnp_relay(). A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() without proper validation or sanitization, allowing OS command injection.
Weaknesses CWE-94
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 21 Jan 2026 11:30:00 +0000

Type Values Removed Values Added
First Time appeared Iptime
Iptime a2003ns-mu
Iptime a2004mu
Iptime a2004ns-mu
Iptime a3004ns-m
Iptime a3008-mu
Iptime a304
Iptime a5004ns-m
Iptime a604-v3
Iptime a604-v5
Iptime a604g-mu
Iptime a604g-skylife
Iptime a604m
Iptime a604r
Iptime a6ns-m
Iptime a7004m
Iptime a8004bcm
Iptime a8004itl
Iptime a8004t
Iptime a8004t-xr
Iptime a804ns-mu
Iptime a8ns-m
Iptime a9004m
Iptime a9004m-x2
Iptime ax3004itl
Iptime ax8004bcm
Iptime n102e
Iptime n102i
Iptime n104e
Iptime n1v
Iptime n2v
Iptime n600
Iptime n602e
Iptime n604e
Iptime n702e
Iptime n702r
Iptime n704e
Iptime n704qca
Iptime n804r
Iptime t5004
Iptime t5008
Iptime v508
Vendors & Products Iptime
Iptime a2003ns-mu
Iptime a2004mu
Iptime a2004ns-mu
Iptime a3004ns-m
Iptime a3008-mu
Iptime a304
Iptime a5004ns-m
Iptime a604-v3
Iptime a604-v5
Iptime a604g-mu
Iptime a604g-skylife
Iptime a604m
Iptime a604r
Iptime a6ns-m
Iptime a7004m
Iptime a8004bcm
Iptime a8004itl
Iptime a8004t
Iptime a8004t-xr
Iptime a804ns-mu
Iptime a8ns-m
Iptime a9004m
Iptime a9004m-x2
Iptime ax3004itl
Iptime ax8004bcm
Iptime n102e
Iptime n102i
Iptime n104e
Iptime n1v
Iptime n2v
Iptime n600
Iptime n602e
Iptime n604e
Iptime n702e
Iptime n702r
Iptime n704e
Iptime n704qca
Iptime n804r
Iptime t5004
Iptime t5008
Iptime v508

Tue, 20 Jan 2026 18:00:00 +0000

Type Values Removed Values Added
Description ipTIME routers A2003NS-MU 10.00.6 to 12.16.2 , N600 10.00.8 to 12.16.2, A604-V3 10.01.6 to 10.07.2, A6ns-M 10.01.6 to 14.19.4 , V508 10.02.2 to 10.06.4, N704QCA 10.02.4 to 12.16.2, A8ns-M 10.03.2 to 14.19.4, A304 10.05.4 to 10.07.4, A3004NS-M,A5004NS-M,A9004M 10.05.4 to 14.19.4, N702R 10.05.8 to 10.06.8, A604M 10.06.4 to 10.07.2, A804NS-MU 10.06.4 to 12.10.2, N804R 10.06.4 to 12.16.2, A7004M,A8004T 10.06.8 to 14.19.4, A604G-MU 10.07.4 to 12.16.2, A3008-MU 10.08.4 to 14.19.4, A2004MU and A2004NS-MU 10.08.6 to 12.17.0, A604-V5,A604R, N702E 10.09.2 to 12.16.2, N2V 10.09.2 to 12.16.8, N604E 10.09.2 to 14.19.4, N104E 10.09.4 to 12.15.2, A8004ITL 11.00.4 to 14.19.4, N102E 11.00.8 to 12.15.2, N1V 11.01.2 to 12.07.6, N102i 11.01.2 to 12.15.2, T5004 11.96.4 to 14.19.4, N602E 11.96.6 to 12.16.8, AX8004BCM and A8004T-XR 11.97.2 to 14.19.4, A9004M-X2, T5008 11.98.2 to 14.19.4, N704E 11.98.4 to 12.16.2, A8004BCM 11.99.1 to 12.16.2, AX3004ITL 12.01.2 to 14.19.4 and A604G-skylife 12.02.4 to 12.12 were discovered to contain an OS command injection vulnerability via the function upnp_relay().
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-01-20T00:00:00.000Z

Updated: 2026-01-27T14:58:59.154Z

Reserved: 2025-08-13T00:00:00.000Z

Link: CVE-2025-55423

cve-icon Vulnrichment

Updated: 2026-01-21T14:42:05.550Z

cve-icon NVD

Status : Analyzed

Published: 2026-01-20T18:16:04.810

Modified: 2026-01-30T20:07:11.633

Link: CVE-2025-55423

cve-icon Redhat

No data.