What’s Vulnerable › Vulnerabilities
CVE-2025-55423
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 3.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2026-01-20 · updated 2026-06-17
- Weakness: CWE-94
Description
A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() without proper validation or sanitization, allowing OS command injection.
Affected products
- Iptime A1004 Firmware: from 9.90.8 through 12.16.2
- Iptime A1004Ns Firmware: from 9.96.0 through 12.16.2
- Iptime A1004V Firmware: from 9.90.8 through 12.16.2
- Iptime A104 Firmware: from 9.90.8 through 10.03.8
- Iptime A104Ns Firmware: from 9.96.0 through 12.16.2
- Iptime A104R Firmware: from 9.90.8 through 10.07.4
- Iptime A1 Firmware: from 9.96.8 through 10.07.4
- Iptime A2003Mu Firmware: from 12.13.0 through 12.16.2
- Iptime A2003Ns-Mu Firmware: from 10.00.6 through 12.16.2
- Iptime A2004 Firmware: from 9.90.8 through 10.07.4
- Iptime A2004Mu Firmware: from 10.08.6 through 12.17.0
- Iptime A2004Ns-Mu Firmware: from 10.08.6 through 12.17.0
- Iptime A2004Ns-R Firmware: from 9.90.8 through 11.00.4
- Iptime A2004Ns Firmware: from 9.90.8 through 11.00.4
- Iptime A2004Nsplus Firmware: from 9.90.8 through 11.00.4
- Iptime A2004Plus Firmware: from 9.90.8 through 10.07.4
- Iptime A2004R Firmware: from 9.90.8 through 10.07.4
- Iptime A2004Se Firmware: from 14.16.6 through 14.19.4
- Iptime A2008 Firmware: from 9.90.8 through 10.07.4
- Iptime A3002Mesh Firmware: from 12.05.4 through 14.19.4
- Iptime A3003Ns Firmware: from 9.99.8 through 11.00.4
- Iptime A3004-Dual Firmware: from 9.90.4 through 10.07.2
- Iptime A3004 Firmware: from 9.90.8 through 10.08.2
- Iptime A3004M Firmware: from 14.18.4 through 14.19.4
- Iptime A3004Ns-Bcm Firmware: from 9.95.8 through 11.00.4
- Iptime A3004Ns-Dual Firmware: from 9.90.4 through 12.09.4
- Iptime A3004Ns-M Firmware: from 10.05.4 through 14.19.4
- Iptime A3004Ns Firmware: from 9.90.2 through 10.09.4
- Iptime A3004T Firmware: from 12.10.2 through 14.19.4
- Iptime A3004Tw Firmware: from 14.15.2 through 14.19.4
References
- https://docs.google.com/spreadsheets/d/1kryOFltCmnPJvDTpIrudgryt79uI4PWchuQ8-Gak24c/edit?usp=sharing
- https://github.com/0x0xxxx/CVE/blob/main/CVE-2025-55423/README.md
- https://github.com/0x0xxxx/CVE/blob/main/CVE-2025-55423/assets/affected_products_cve_format.json
- https://iptime.com/iptime/?pageid=4&page_id=126&dfsid=3&dftid=583&uid=25203&mod=document
Get alerted when CVE-2025-55423 or the next vulnerability affects your stack