CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, при специфични условия, с обикновен потребителски вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
A weakness has been identified in EFM ipTIME A3004T 14.19.0. This vulnerability affects the function show_debug_screen of the file /sess-bin/timepro.cgi of the component Administrator Password Handler. This manipulation of the argument aaksjdkfj with the input !@dnjsrureljrm*& causes command injection. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is stated that the exploitability is difficult. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Засегнати продукти
- EFM ipTIME A3004T: 14.19.0
Вид слабост
История
- 11 декември 2025 Публикувано
Други уязвимости в EFM ipTIME A3004T
- 10.0CVE-2026-19977
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2025-14485
- https://nvd.nist.gov/vuln/detail/CVE-2025-14485
- https://vuldb.com/?id.335768
- https://vuldb.com/?ctiid.335768
- https://vuldb.com/?submit.702655
- https://www.yuque.com/yuqueyonghuexlgkz/zepczx/mf0uog9s2ycay4g2?singleDoc
- https://pan.baidu.com/s/12VsWYY-bf2-Kfufbs2dlXw?pwd=drt