Approved changes feed: RSS · Atom

cpe:2.3:a:efm:iptime_a6004mx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEfm (158bc912-f5c5-5ddb-b8be-7d1ad6fcbded)
ProductIptime A6004Mx (226023d5-13fb-57ee-a3f6-bafbd16e4cad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2550 vulnerable 2026-06-08 07:55:17.206026 EFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted upload
CRITICAL (9.8)
A vulnerability was found in EFM iptime A6004MX 14.18.2. Affected is the function commit_vpncli_file_upload of the file /cgi/timepro.cgi. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-02-16T10:02:07.745Z
Updated: 2026-02-23T10:08:20.919Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.