EFMNetworks ipTIME CGI File Processing Remote Code Execution Vulnerability

BID:74229

Info

EFMNetworks ipTIME CGI File Processing Remote Code Execution Vulnerability

Bugtraq ID: 74229
Class: Design Error
CVE:
Remote: Yes
Local: No
Published: Apr 17 2015 12:00AM
Updated: Apr 17 2015 12:00AM
Credit: Pierre Kim and Alexandre Torres
Vulnerable: EFMNetworks ipTIME X6003
EFMNetworks ipTIME X5007
EFMNetworks ipTIME X3007
EFMNetworks ipTIME X3003
EFMNetworks ipTIME WR-E1
EFMNetworks ipTIME V308
EFMNetworks ipTIME V304
EFMNetworks ipTIME V124
EFMNetworks ipTIME V116
EFMNetworks ipTIME V108
EFMNetworks ipTIME V104
EFMNetworks ipTIME V1024
EFMNetworks ipTIME V1016
EFMNetworks ipTIME T3008
EFMNetworks ipTIME T3004
EFMNetworks ipTIME T24000
EFMNetworks ipTIME T16000
EFMNetworks ipTIME T1008
EFMNetworks ipTIME T1004
EFMNetworks ipTIME Smart
EFMNetworks ipTIME Q604
EFMNetworks ipTIME Q504
EFMNetworks ipTIME Q304
EFMNetworks ipTIME Q204
EFMNetworks ipTIME Q104
EFMNetworks ipTIME Q1
EFMNetworks ipTIME N904Vplus
EFMNetworks ipTIME N904V
EFMNetworks ipTIME N904plus
EFMNetworks ipTIME N904NS
EFMNetworks ipTIME N904
EFMNetworks ipTIME N804V
EFMNetworks ipTIME N804T3
EFMNetworks ipTIME N804T
EFMNetworks ipTIME N804A3
EFMNetworks ipTIME N804A
EFMNetworks ipTIME N804
EFMNetworks ipTIME N8004V
EFMNetworks ipTIME N8004R
EFMNetworks ipTIME N8004
EFMNetworks ipTIME N704V3
EFMNetworks ipTIME N704V
EFMNetworks ipTIME N704S
EFMNetworks ipTIME N704NS
EFMNetworks ipTIME N704M
EFMNetworks ipTIME N704BCM
EFMNetworks ipTIME N704A3
EFMNetworks ipTIME N704A
EFMNetworks ipTIME N704
EFMNetworks ipTIME N7004NS
EFMNetworks ipTIME N608
EFMNetworks ipTIME N604Vplus
EFMNetworks ipTIME N604V
EFMNetworks ipTIME N604Tplus
EFMNetworks ipTIME N604T
EFMNetworks ipTIME N604S
EFMNetworks ipTIME N604Rplus
EFMNetworks ipTIME N604R
EFMNetworks ipTIME N604plus
EFMNetworks ipTIME N604M
EFMNetworks ipTIME N604i
EFMNetworks ipTIME N604A
EFMNetworks ipTIME N6004R
EFMNetworks ipTIME N6004M
EFMNetworks ipTIME N6004
EFMNetworks ipTIME N504
EFMNetworks ipTIME N5004
EFMNetworks ipTIME N5-r1
EFMNetworks ipTIME N5
EFMNetworks ipTIME N3004
EFMNetworks ipTIME N2plus
EFMNetworks ipTIME N2Eplus
EFMNetworks ipTIME N2E
EFMNetworks ipTIME N1plus
EFMNetworks ipTIME N1E
EFMNetworks ipTIME N104V
EFMNetworks ipTIME N104T
EFMNetworks ipTIME N104S-r1
EFMNetworks ipTIME N104S
EFMNetworks ipTIME N104R
EFMNetworks ipTIME N104Q
EFMNetworks ipTIME N104plus
EFMNetworks ipTIME N104M
EFMNetworks ipTIME N104K
EFMNetworks ipTIME N104i
EFMNetworks ipTIME N104A
EFMNetworks ipTIME N104-r3
EFMNetworks ipTIME N104
EFMNetworks ipTIME N1
EFMNetworks ipTIME Multi
EFMNetworks ipTIME MobileAP1
EFMNetworks ipTIME Mini
EFMNetworks ipTIME G504
EFMNetworks ipTIME G304
EFMNetworks ipTIME G204
EFMNetworks ipTIME G104M
EFMNetworks ipTIME G104i
EFMNetworks ipTIME G104BE
EFMNetworks ipTIME G104A
EFMNetworks ipTIME G104
EFMNetworks ipTIME G1
EFMNetworks ipTIME Extender2
EFMNetworks ipTIME A5004NS
EFMNetworks ipTIME A3004NS
EFMNetworks ipTIME A3004
EFMNetworks ipTIME A2008
EFMNetworks ipTIME A2004plus
EFMNetworks ipTIME A2004NSplus
EFMNetworks ipTIME A2004NS
EFMNetworks ipTIME A2004
EFMNetworks ipTIME A104NS
EFMNetworks ipTIME A104
EFMNetworks ipTIME A1004V
EFMNetworks ipTIME A1004
Not Vulnerable:

Exploit / POC

EFMNetworks ipTIME CGI File Processing Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report