ipTIME A8004T

A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() without proper validation or sanitization, allowing OS command injection.

EFM ipTIME A8004T Hidden Hiddenloginsetup timepro.cgi httpcon_check_session_url improper authentication

EFM ipTIME A8004T VPN Service timepro.cgi commit_vpncli_file_upload unrestricted upload

EFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoor