Filtered by vendor Iptime Subscriptions
Filtered by product A2004mu Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-55423 1 Iptime 41 A2003ns-mu, A2004mu, A2004ns-mu and 38 more 2026-01-21 9.8 Critical
A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() without proper validation or sanitization, allowing OS command injection.