CVE-2025-55423

creationtimestamp| type| source ---|---|--- 2026-01-20 19:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcuuzomfiw2i 2026-01-21 16:23:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcx3g7wxrb27...

CVE-2025-55423

A command injection vulnerability exists in the upnprelay function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system without proper validation or sanitization, allowing OS command injection...

CVE-2025-55423

A command injection vulnerability exists in the upnprelay function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system without proper validation or sanitization, allowing OS command injection...

CVE-2025-55423

CVE-2025-55423 is an OS command-injection vulnerability in the upnp_relay() function affecting ipTIME routers across numerous models (e.g., A2003NS-MU, N600, A604-V3, A6ns-M, V508, N704QCA, A8ns-M, A304, A3004NS-M, A5004NS-M, A9004M, N702R, A604M, A804NS-MU, N804R, A7004M, A8004T, A604G-MU, A3008...