CVE-2025-55423

Kritik

Açıklama

Birden fazla ipTIME yönlendirici modelindeki upnp_relay() fonksiyonunda bir komut enjeksiyonu zafiyeti bulunmaktadır; çünkü üst yönlendiriciye port yönlendirme bilgilerini iletmek için kullanılan controlURL değeri, uygun doğrulama veya temizleme işlemi yapılmadan system() fonksiyonuna aktarıldığından işletim sistemi komut enjeksiyonuna izin vermektedir.

ÖnemKritik
CVSS9.8
İstismar olasılığı—
ÜrünIptime N104s-r1 Firmware
Yayın20 Oca 2026
İlk görülme20 Oca 2026
Zayıflık türüCWE-94Kod enjeksiyonu

Nasıl düzeltilir

Kaynaklarda bu zafiyet için düzeltilmiş sürüm ya da yama bağlantısı yok.

Etkilenen ürünler

ÜrünEtkilenen sürümlerDüzeltildiği sürüm
iptime n104s-r1_firmware9.90.8 ≤ v ≤ 10.02.2—
iptime n104v_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n1e_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n1plus_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n1plus-i_firmware9.99.6 ≤ v ≤ 10.06.8—
iptime n1v_firmware11.01.2 ≤ v ≤ 12.07.6—
iptime n2e_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n2eplus_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n2plus_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n2plus-i_firmware9.99.6 ≤ v ≤ 10.06.8—
iptime n2v_firmware10.09.2 ≤ v ≤ 12.16.8—
iptime n2vs_firmware12.16.8—
iptime n3_firmware9.93.2 ≤ v ≤ 10.06.8—
iptime n3-i_firmware9.99.6 ≤ v ≤ 10.06.8—
iptime n5_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n5-i_firmware9.99.6 ≤ v ≤ 10.06.8—
iptime n6_firmware9.96.8 ≤ v ≤ 10.06.8—
iptime n600_firmware10.00.8 ≤ v ≤ 12.16.2—
iptime n6004r_firmware9.90.8 ≤ v ≤ 10.02.2—
iptime n602e_firmware11.96.6 ≤ v ≤ 12.16.8—
iptime n602eplus_firmware12.14.2 ≤ v ≤ 12.16.2—
iptime n602se_firmware14.19.0 ≤ v ≤ 14.19.4—
iptime n604_black_firmware9.93.8 ≤ v ≤ 12.16.2—
iptime n604a_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n604e_firmware10.09.2 ≤ v ≤ 14.19.4—
iptime n604eplus_firmware12.14.2 ≤ v ≤ 14.19.4—
iptime n604plus_firmware9.90.8 ≤ v ≤ 12.15.2—
iptime n604plus-i_firmware9.99.6 ≤ v ≤ 12.14.6—
iptime n604r_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n604rplus_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n604rplus-i_firmware9.99.6 ≤ v ≤ 10.06.8—
iptime n604s_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n604se_firmware14.18.4 ≤ v ≤ 14.19.4—
iptime n604t_firmware9.90.8 ≤ v ≤ 10.03.2—
iptime n604tplus_firmware9.90.8 ≤ v ≤ 10.03.2—
iptime n604v_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n604vplus_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n7004ns_firmware9.91.2—
iptime n702bcm_firmware9.90.8 ≤ v ≤ 12.16.2—
iptime n702e_firmware10.09.2 ≤ v ≤ 12.16.2—
iptime ax11000_firmware14.16.6 ≤ v ≤ 14.19.4—
iptime ax2002mesh_firmware14.16.6 ≤ v ≤ 14.19.4—
iptime ax2004_firmware14.17.4 ≤ v ≤ 14.19.4—
iptime ax2004bcm_firmware12.04.2 ≤ v ≤ 14.19.4—
iptime ax2004m_firmware14.02.0 ≤ v ≤ 14.19.4—
iptime ax3004bcm_firmware14.16.2 ≤ v ≤ 14.19.4—
iptime ax3004itl_firmware12.01.2 ≤ v ≤ 14.19.4—
iptime ax8004bcm_firmware11.97.2 ≤ v ≤ 14.19.4—
iptime ax8004m_firmware14.05.2 ≤ v ≤ 14.19.4—
iptime ax8008m_firmware14.15.4 ≤ v ≤ 14.19.4—
iptime a1_firmware9.96.8 ≤ v ≤ 10.07.4—
iptime a1004_firmware9.90.8 ≤ v ≤ 12.16.2—
iptime a1004ns_firmware9.96.0 ≤ v ≤ 12.16.2—
iptime a1004v_firmware9.90.8 ≤ v ≤ 12.16.2—
iptime a104_firmware9.90.8 ≤ v ≤ 10.03.8—
iptime a104ns_firmware9.96.0 ≤ v ≤ 12.16.2—
iptime a104r_firmware9.90.8 ≤ v ≤ 10.07.4, Aralık belirtilmemiş—
iptime a2003mu_firmware12.13.0 ≤ v ≤ 12.16.2—
iptime a2003ns-mu_firmware10.00.6 ≤ v ≤ 12.16.2—
iptime a2004_firmware9.90.8 ≤ v ≤ 10.07.4—
iptime a2004mu_firmware10.08.6 ≤ v ≤ 12.17.0—
iptime a2004ns_firmware9.90.8 ≤ v ≤ 11.00.4—
iptime a2004ns-mu_firmware10.08.6 ≤ v ≤ 12.17.0—
iptime a2004ns-r_firmware9.90.8 ≤ v ≤ 11.00.4—
iptime a2004nsplus_firmware9.90.8 ≤ v ≤ 11.00.4—
iptime a2004plus_firmware9.90.8 ≤ v ≤ 10.07.4—
iptime a2004r_firmware9.90.8 ≤ v ≤ 10.07.4—
iptime a2004se_firmware14.16.6 ≤ v ≤ 14.19.4—
iptime a2008_firmware9.90.8 ≤ v ≤ 10.07.4—
iptime a3_firmware9.97.2 ≤ v ≤ 10.07.2—
iptime a3002mesh_firmware12.05.4 ≤ v ≤ 14.19.4—
iptime a3003ns_firmware9.99.8 ≤ v ≤ 11.00.4—
iptime a3004_firmware9.90.8 ≤ v ≤ 10.08.2—
iptime a3004-dual_firmware9.90.4 ≤ v ≤ 10.07.2—
iptime a3004m_firmware14.18.4 ≤ v ≤ 14.19.4—
iptime a3004ns_firmware9.90.2 ≤ v ≤ 10.09.4—
iptime a3004ns-bcm_firmware9.95.8 ≤ v ≤ 11.00.4—
iptime a3004ns-dual_firmware9.90.4 ≤ v ≤ 12.09.4—
iptime a3004ns-m_firmware10.05.4 ≤ v ≤ 14.19.4—
iptime a3004t_firmware12.10.2 ≤ v ≤ 14.19.4—
iptime a3004tw_firmware14.15.2 ≤ v ≤ 14.19.4—
iptime a3008-mu_firmware10.08.4 ≤ v ≤ 14.19.4—
iptime a304_firmware10.05.4 ≤ v ≤ 10.07.4—
iptime a5004ns_firmware9.90.2 ≤ v ≤ 11.00.4—
iptime a5004ns-m_firmware10.05.4 ≤ v ≤ 14.19.4—
iptime a6004mx_firmware12.04.6 ≤ v ≤ 14.19.4—
iptime a6004ns_firmware9.90.2 ≤ v ≤ 11.00.4—
iptime a6004ns-m_firmware9.99.8 ≤ v ≤ 14.19.4—
iptime a604_firmware9.90.8 ≤ v ≤ 12.06.6—
iptime a604-v3_firmware10.01.6 ≤ v ≤ 10.07.2—
iptime a604-v5_firmware10.09.2 ≤ v ≤ 12.16.2—
iptime a604g-mu_firmware10.07.4 ≤ v ≤ 12.16.2—
iptime a604g-skylife_firmware12.02.4 ≤ v ≤ 12.12.4—
iptime a604m_firmware10.06.4 ≤ v ≤ 10.07.2—
iptime a604mu_firmware12.12.4 ≤ v ≤ 12.16.2—
iptime a604r_firmware10.09.2 ≤ v ≤ 12.16.2—
iptime a604se_firmware14.17.2 ≤ v ≤ 14.19.4—
iptime a604v_firmware9.90.8 ≤ v ≤ 10.07.4—
iptime a6ns-m_firmware10.01.6 ≤ v ≤ 14.19.4—
iptime a7004m_firmware10.06.8 ≤ v ≤ 14.19.4—
iptime a704ns-bcm_firmware9.95.8 ≤ v ≤ 11.00.4—
iptime a7ns_firmware9.96.0 ≤ v ≤ 11.00.4—
iptime a8004bcm_firmware11.99.1 ≤ v ≤ 12.16.2—
iptime a8004itl_firmware11.00.4 ≤ v ≤ 14.19.4—
iptime a8004ns-m_firmware9.99.2 ≤ v ≤ 14.19.4—
iptime a8004t_firmware10.06.8 ≤ v ≤ 14.19.4—
iptime a8004t-xr_firmware11.97.2 ≤ v ≤ 14.19.4—
iptime a804ns-mu_firmware10.06.4 ≤ v ≤ 12.10.2—
iptime a8ns-m_firmware10.03.2 ≤ v ≤ 14.19.4—
iptime a9004m_firmware10.05.4 ≤ v ≤ 14.19.4—
iptime a9004m-x2_firmware11.98.2 ≤ v ≤ 14.19.4—
iptime ew302n_firmware9.90.8 ≤ v ≤ 12.16.2—
iptime n102e_firmware11.00.8 ≤ v ≤ 12.15.2—
iptime n102eplus_firmware12.14.2 ≤ v ≤ 12.15.2—
iptime n102i_firmware11.01.2 ≤ v ≤ 12.15.2—
iptime n102iplus_firmware12.14.2 ≤ v ≤ 12.15.2—
iptime n104_black_firmware9.93.8 ≤ v ≤ 10.06.8—
iptime n104e_firmware10.09.4 ≤ v ≤ 12.15.2—
iptime n104eplus_firmware12.14.2 ≤ v ≤ 12.15.2—
iptime n104k_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n104plus_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n104plus-i_firmware9.99.6 ≤ v ≤ 10.06.8—
iptime n104q_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n104q-i_firmware9.99.6 ≤ v ≤ 10.06.8—
iptime n104r_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n702eplus_firmware12.12.4 ≤ v ≤ 12.16.2—
iptime n702r_firmware10.05.8 ≤ v ≤ 10.06.8—
iptime n704-a3_firmware9.90.8 ≤ v ≤ 10.06.8—
iptime n704bcm_firmware9.90.8 ≤ v ≤ 12.16.2—
iptime n704e_firmware11.98.4 ≤ v ≤ 12.16.2—
iptime n704eplus_firmware12.14.2 ≤ v ≤ 12.16.2—
iptime n704ns_firmware9.91.4 ≤ v ≤ 9.96.0—
iptime n704qca_firmware10.02.4 ≤ v ≤ 12.16.2—
iptime n704v3_firmware9.90.8 ≤ v ≤ 12.10.2—
iptime n8004r_firmware9.90.8 ≤ v ≤ 10.02.2—
iptime n8004v_firmware9.90.8 ≤ v ≤ 10.02.2—
iptime n804_firmware9.91.2 ≤ v ≤ 9.96.8—
iptime n804a_firmware9.91.2 ≤ v ≤ 9.96.8—
iptime n804a3_firmware9.90.8 ≤ v ≤ 9.96.8—
iptime n804r_firmware10.06.4 ≤ v ≤ 12.16.2—
iptime n804t_firmware9.91.2 ≤ v ≤ 9.96.8—
iptime n804t3_firmware9.90.8 ≤ v ≤ 9.96.8—
iptime n804v_firmware9.91.2 ≤ v ≤ 9.96.8—
iptime n904_firmware9.90.8 ≤ v ≤ 10.02.2—
iptime n904ns_firmware9.91.4 ≤ v ≤ 9.96.0—
iptime n904plus_firmware9.90.8 ≤ v ≤ 10.02.2—
iptime n904v_firmware9.90.8 ≤ v ≤ 10.02.2—
iptime smart_firmware9.90.8 ≤ v ≤ 9.94.2—
iptime q1_firmware9.91.2—
iptime q304_firmware9.91.2—
iptime q504_firmware9.91.2—
iptime q604_firmware9.91.2—
iptime t16000_firmware9.91.2 ≤ v ≤ 11.03.6—
iptime t16000m_firmware12.07.4 ≤ v ≤ 14.19.4—
iptime t24000_firmware9.91.2 ≤ v ≤ 11.03.6—
iptime t24000m_firmware12.07.4 ≤ v ≤ 14.19.4—
iptime t3004_firmware9.90.8 ≤ v ≤ 12.07.6—
iptime t3008_firmware9.90.8 ≤ v ≤ 12.09.6—
iptime t5004_firmware11.96.4 ≤ v ≤ 14.19.4—
iptime t5008_firmware11.98.2 ≤ v ≤ 14.19.4—
iptime v304_firmware9.91.2—
iptime v504_firmware9.90.8 ≤ v ≤ 12.15.2—
iptime v508_firmware10.02.2 ≤ v ≤ 10.06.4—

Sürümünüzü kontrol edin

Ürünü seçin ve kullandığınız sürümü yazın; sürümün etkilenen aralıkta olup olmadığını görün.

Intelligence 360 paketinde

Attack Surface Management

Alan adlarınıza bağlı varlıkları, bu varlıklarda çalışan teknolojileri ve bilinen zafiyetleri tek listede görün.

CVE-2025-55423 · Iptime N104s-r1 Firmware · Dark Radar