PT-2025-3069 · Iptime · Iptime A2004

Name of the Vulnerable Software and Affected Versions: ipTIME A2004 version 12.17.0 Description: An access control issue in the component /login/hostinfo.cgi allows attackers to obtain sensitive information without authentication. Recommendations: For ipTIME A2004 version 12.17.0, consider...

CVE-2024-54764

The ipTIME A2004 router, running firmware version v12.17.0 , contains an access control vulnerability in the /login/hostinfo2.cgi component. This flaw allows unauthenticated attackers to obtain sensitive device settings and configuration information. While a direct patch version is not specified,...

CVE-2024-54763

The ipTIME A2004 router (version 12.17.0 ) contains an access control issue in the /login/hostinfo.cgi component. This vulnerability allows unauthenticated attackers to obtain sensitive device configuration information without authentication. While no specific patch version is currently listed, i...

CVE-2022-23771

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrar...

CVE-2022-23771

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrar...

Design/Logic Flaw

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrar...

CVE-2022-23771

This CVE-2022-23771 entry relates to ipTIME NAS products and describes a CSRF-like flaw on user account creation/deletion pages. The vulnerability stems from insufficient validation of POST requests, enabling an attacker to delete user accounts or escalate privileges. The connected documents corr...

CVE-2022-23771 IPTIME NAS1DUAL CSRF Vulnerability

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrar...

CVE-2022-23771 IPTIME NAS1DUAL CSRF Vulnerability

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrar...

CVE-2022-23771: Cross-Site Request Forgery (CSRF)

This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete user accounts, or to escalate arbitrar...

ipTIME NAS 跨站请求伪造漏洞

ipTIME NAS is a wireless router product from South Korea's ipTIME Corporation that provides NAS network attached storage. A security vulnerability exists in ipTIME NAS that stems from a lack of validation of POST requests sent to a page. An attacker can exploit this vulnerability to delete user...

CVE-2022-23765

This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request...

CVE-2022-23765

This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request...

CVE-2022-23765

This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request...

Cross site request forgery (csrf)

This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request...

CVE-2022-23765

CVE-2022-23765 describes a CSRF flaw in IPTIME NAS family devices. A malicious POST request to a specific page (while a user is logged in) can allow remote attackers to change the root password, effectively gaining root privileges. The connected documents corroborate the risk as described, with m...

CVE-2022-23765 IPTIME NAS family CSRF vulnerability

This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request...

PT-2022-16252 · Iptime · Iptime Nas

Name of the Vulnerable Software and Affected Versions: IPTIME NAS affected versions not specified Description: The issue occurs when a malicious POST request is sent to a specific page while logged in as a random user from some family of IPTIME NAS. This allows remote attackers to steal root...

CVE-2022-23765: Cross-Site Request Forgery (CSRF)

This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request...

CVE-2021-26620

An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attackers are able to steal important information in the server by exploiting vulnerabilities such as insufficient authentication when accessing the shared folder and changing user’s...