CVE-2025-55423-analysis-and-reproduction

This repository does not have a README...

CVE-2025-55423

creationtimestamp| type| source ---|---|--- 2026-01-20 19:23:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcuuzomfiw2i 2026-01-21 16:23:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcx3g7wxrb27...

CVE-2025-55423

A command injection vulnerability exists in the upnprelay function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system without proper validation or sanitization, allowing OS command injection...

CVE-2025-55423

A command injection vulnerability exists in the upnprelay function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system without proper validation or sanitization, allowing OS command injection...

CVE-2025-55423

A command injection vulnerability exists in the upnp_relay() function of multiple ipTIME router models. The flaw occurs because the controlURL value, used to pass port-forwarding information to an upstream router, is passed to the system() function without proper validation or sanitization. An at...