CVE Feed

    Dashboard / CVE / CVE-2025-55423

    CVE-2025-55423

    A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() without proper validation or sanitization, allowing OS command injection.

    Published:Jan 20, 2026
    Last Modified:Jan 30, 2026
    EPS:Jan 20, 2026
    EPSS Score:0.00273
    CVSS Score:9.8

    Affected Products

    Vendor
    Iptime
    Product
    A1
    Vendor
    Iptime
    Product
    A1004
    Vendor
    Iptime
    Product
    A1004 Firmware
    Vendor
    Iptime
    Product
    A1004ns
    Vendor
    Iptime
    Product
    A1004ns Firmware
    Vendor
    Iptime
    Product
    A1004v
    Vendor
    Iptime
    Product
    A1004v Firmware
    Vendor
    Iptime
    Product
    A104
    Vendor
    Iptime
    Product
    A104 Firmware
    Vendor
    Iptime
    Product
    A104ns
    Vendor
    Iptime
    Product
    A104ns Firmware
    Vendor
    Iptime
    Product
    A104r
    Vendor
    Iptime
    Product
    A104r Firmware
    Vendor
    Iptime
    Product
    A1 Firmware
    Vendor
    Iptime
    Product
    A2003mu
    Vendor
    Iptime
    Product
    A2003mu Firmware
    Vendor
    Iptime
    Product
    A2003ns-mu
    Vendor
    Iptime
    Product
    A2003ns-mu Firmware
    Vendor
    Iptime
    Product
    A2004
    Vendor
    Iptime
    Product
    A2004 Firmware
    Vendor
    Iptime
    Product
    A2004mu
    Vendor
    Iptime
    Product
    A2004mu Firmware
    Vendor
    Iptime
    Product
    A2004ns
    Vendor
    Iptime
    Product
    A2004ns-mu
    Vendor
    Iptime
    Product
    A2004ns-mu Firmware
    Vendor
    Iptime
    Product
    A2004ns-r
    Vendor
    Iptime
    Product
    A2004ns-r Firmware
    Vendor
    Iptime
    Product
    A2004ns Firmware
    Vendor
    Iptime
    Product
    A2004nsplus
    Vendor
    Iptime
    Product
    A2004nsplus Firmware
    Vendor
    Iptime
    Product
    A2004plus
    Vendor
    Iptime
    Product
    A2004plus Firmware
    Vendor
    Iptime
    Product
    A2004r
    Vendor
    Iptime
    Product
    A2004r Firmware
    Vendor
    Iptime
    Product
    A2004se
    Vendor
    Iptime
    Product
    A2004se Firmware
    Vendor
    Iptime
    Product
    A2008
    Vendor
    Iptime
    Product
    A2008 Firmware
    Vendor
    Iptime
    Product
    A3
    Vendor
    Iptime
    Product
    A3002mesh
    Vendor
    Iptime
    Product
    A3002mesh Firmware
    Vendor
    Iptime
    Product
    A3003ns
    Vendor
    Iptime
    Product
    A3003ns Firmware
    Vendor
    Iptime
    Product
    A3004
    Vendor
    Iptime
    Product
    A3004-dual
    Vendor
    Iptime
    Product
    A3004-dual Firmware
    Vendor
    Iptime
    Product
    A3004 Firmware
    Vendor
    Iptime
    Product
    A3004m
    Vendor
    Iptime
    Product
    A3004m Firmware
    Vendor
    Iptime
    Product
    A3004ns
    Vendor
    Iptime
    Product
    A3004ns-bcm
    Vendor
    Iptime
    Product
    A3004ns-bcm Firmware
    Vendor
    Iptime
    Product
    A3004ns-dual
    Vendor
    Iptime
    Product
    A3004ns-dual Firmware
    Vendor
    Iptime
    Product
    A3004ns-m
    Vendor
    Iptime
    Product
    A3004ns-m Firmware
    Vendor
    Iptime
    Product
    A3004ns Firmware
    Vendor
    Iptime
    Product
    A3004t
    Vendor
    Iptime
    Product
    A3004t Firmware
    Vendor
    Iptime
    Product
    A3004tw
    Vendor
    Iptime
    Product
    A3004tw Firmware
    Vendor
    Iptime
    Product
    A3008-mu
    Vendor
    Iptime
    Product
    A3008-mu Firmware
    Vendor
    Iptime
    Product
    A304
    Vendor
    Iptime
    Product
    A304 Firmware
    Vendor
    Iptime
    Product
    A3 Firmware
    Vendor
    Iptime
    Product
    A5004ns
    Vendor
    Iptime
    Product
    A5004ns-m
    Vendor
    Iptime
    Product
    A5004ns-m Firmware
    Vendor
    Iptime
    Product
    A5004ns Firmware
    Vendor
    Iptime
    Product
    A6004mx
    Vendor
    Iptime
    Product
    A6004mx Firmware
    Vendor
    Iptime
    Product
    A6004ns
    Vendor
    Iptime
    Product
    A6004ns-m
    Vendor
    Iptime
    Product
    A6004ns-m Firmware
    Vendor
    Iptime
    Product
    A6004ns Firmware
    Vendor
    Iptime
    Product
    A604
    Vendor
    Iptime
    Product
    A604-v3
    Vendor
    Iptime
    Product
    A604-v3 Firmware
    Vendor
    Iptime
    Product
    A604-v5
    Vendor
    Iptime
    Product
    A604-v5 Firmware
    Vendor
    Iptime
    Product
    A604 Firmware
    Vendor
    Iptime
    Product
    A604g-mu
    Vendor
    Iptime
    Product
    A604g-mu Firmware
    Vendor
    Iptime
    Product
    A604g-skylife
    Vendor
    Iptime
    Product
    A604g-skylife Firmware
    Vendor
    Iptime
    Product
    A604m
    Vendor
    Iptime
    Product
    A604m Firmware
    Vendor
    Iptime
    Product
    A604mu
    Vendor
    Iptime
    Product
    A604mu Firmware
    Vendor
    Iptime
    Product
    A604r
    Vendor
    Iptime
    Product
    A604r Firmware
    Vendor
    Iptime
    Product
    A604se
    Vendor
    Iptime
    Product
    A604se Firmware
    Vendor
    Iptime
    Product
    A604v
    Vendor
    Iptime
    Product
    A604v Firmware
    Vendor
    Iptime
    Product
    A6ns-m
    Vendor
    Iptime
    Product
    A6ns-m Firmware
    Vendor
    Iptime
    Product
    A7004m
    Vendor
    Iptime
    Product
    A7004m Firmware
    Vendor
    Iptime
    Product
    A704ns-bcm
    Vendor
    Iptime
    Product
    A704ns-bcm Firmware
    Vendor
    Iptime
    Product
    A7ns
    Vendor
    Iptime
    Product
    A7ns Firmware
    Vendor
    Iptime
    Product
    A8004bcm
    Vendor
    Iptime
    Product
    A8004bcm Firmware
    Vendor
    Iptime
    Product
    A8004itl
    Vendor
    Iptime
    Product
    A8004itl Firmware
    Vendor
    Iptime
    Product
    A8004ns-m
    Vendor
    Iptime
    Product
    A8004ns-m Firmware
    Vendor
    Iptime
    Product
    A8004t
    Vendor
    Iptime
    Product
    A8004t-xr
    Vendor
    Iptime
    Product
    A8004t-xr Firmware
    Vendor
    Iptime
    Product
    A8004t Firmware
    Vendor
    Iptime
    Product
    A804ns-mu
    Vendor
    Iptime
    Product
    A804ns-mu Firmware
    Vendor
    Iptime
    Product
    A8ns-m
    Vendor
    Iptime
    Product
    A8ns-m Firmware
    Vendor
    Iptime
    Product
    A9004m
    Vendor
    Iptime
    Product
    A9004m-x2
    Vendor
    Iptime
    Product
    A9004m-x2 Firmware
    Vendor
    Iptime
    Product
    A9004m Firmware
    Vendor
    Iptime
    Product
    Ax11000
    Vendor
    Iptime
    Product
    Ax11000 Firmware
    Vendor
    Iptime
    Product
    Ax2002mesh
    Vendor
    Iptime
    Product
    Ax2002mesh Firmware
    Vendor
    Iptime
    Product
    Ax2004
    Vendor
    Iptime
    Product
    Ax2004 Firmware
    Vendor
    Iptime
    Product
    Ax2004bcm
    Vendor
    Iptime
    Product
    Ax2004bcm Firmware
    Vendor
    Iptime
    Product
    Ax2004m
    Vendor
    Iptime
    Product
    Ax2004m Firmware
    Vendor
    Iptime
    Product
    Ax3004bcm
    Vendor
    Iptime
    Product
    Ax3004bcm Firmware
    Vendor
    Iptime
    Product
    Ax3004itl
    Vendor
    Iptime
    Product
    Ax3004itl Firmware
    Vendor
    Iptime
    Product
    Ax8004bcm
    Vendor
    Iptime
    Product
    Ax8004bcm Firmware
    Vendor
    Iptime
    Product
    Ax8004m
    Vendor
    Iptime
    Product
    Ax8004m Firmware
    Vendor
    Iptime
    Product
    Ax8008m
    Vendor
    Iptime
    Product
    Ax8008m Firmware
    Vendor
    Iptime
    Product
    Ew302n
    Vendor
    Iptime
    Product
    Ew302n Firmware
    Vendor
    Iptime
    Product
    N102e
    Vendor
    Iptime
    Product
    N102e Firmware
    Vendor
    Iptime
    Product
    N102eplus
    Vendor
    Iptime
    Product
    N102eplus Firmware
    Vendor
    Iptime
    Product
    N102i
    Vendor
    Iptime
    Product
    N102i Firmware
    Vendor
    Iptime
    Product
    N102iplus
    Vendor
    Iptime
    Product
    N102iplus Firmware
    Vendor
    Iptime
    Product
    N104 Black
    Vendor
    Iptime
    Product
    N104 Black Firmware
    Vendor
    Iptime
    Product
    N104e
    Vendor
    Iptime
    Product
    N104e Firmware
    Vendor
    Iptime
    Product
    N104eplus
    Vendor
    Iptime
    Product
    N104eplus Firmware
    Vendor
    Iptime
    Product
    N104k
    Vendor
    Iptime
    Product
    N104k Firmware
    Vendor
    Iptime
    Product
    N104plus
    Vendor
    Iptime
    Product
    N104plus-i
    Vendor
    Iptime
    Product
    N104plus-i Firmware
    Vendor
    Iptime
    Product
    N104plus Firmware
    Vendor
    Iptime
    Product
    N104q
    Vendor
    Iptime
    Product
    N104q-i
    Vendor
    Iptime
    Product
    N104q-i Firmware
    Vendor
    Iptime
    Product
    N104q Firmware
    Vendor
    Iptime
    Product
    N104r
    Vendor
    Iptime
    Product
    N104r Firmware
    Vendor
    Iptime
    Product
    N104s-r1
    Vendor
    Iptime
    Product
    N104s-r1 Firmware
    Vendor
    Iptime
    Product
    N104v
    Vendor
    Iptime
    Product
    N104v Firmware
    Vendor
    Iptime
    Product
    N1e
    Vendor
    Iptime
    Product
    N1e Firmware
    Vendor
    Iptime
    Product
    N1plus
    Vendor
    Iptime
    Product
    N1plus-i
    Vendor
    Iptime
    Product
    N1plus-i Firmware
    Vendor
    Iptime
    Product
    N1plus Firmware
    Vendor
    Iptime
    Product
    N1v
    Vendor
    Iptime
    Product
    N1v Firmware
    Vendor
    Iptime
    Product
    N2e
    Vendor
    Iptime
    Product
    N2e Firmware
    Vendor
    Iptime
    Product
    N2eplus
    Vendor
    Iptime
    Product
    N2eplus Firmware
    Vendor
    Iptime
    Product
    N2plus
    Vendor
    Iptime
    Product
    N2plus-i
    Vendor
    Iptime
    Product
    N2plus-i Firmware
    Vendor
    Iptime
    Product
    N2plus Firmware
    Vendor
    Iptime
    Product
    N2v
    Vendor
    Iptime
    Product
    N2v Firmware
    Vendor
    Iptime
    Product
    N2vs
    Vendor
    Iptime
    Product
    N2vs Firmware
    Vendor
    Iptime
    Product
    N3
    Vendor
    Iptime
    Product
    N3-i
    Vendor
    Iptime
    Product
    N3-i Firmware
    Vendor
    Iptime
    Product
    N3 Firmware
    Vendor
    Iptime
    Product
    N5
    Vendor
    Iptime
    Product
    N5-i
    Vendor
    Iptime
    Product
    N5-i Firmware
    Vendor
    Iptime
    Product
    N5 Firmware
    Vendor
    Iptime
    Product
    N6
    Vendor
    Iptime
    Product
    N600
    Vendor
    Iptime
    Product
    N6004r
    Vendor
    Iptime
    Product
    N6004r Firmware
    Vendor
    Iptime
    Product
    N600 Firmware
    Vendor
    Iptime
    Product
    N602e
    Vendor
    Iptime
    Product
    N602e Firmware
    Vendor
    Iptime
    Product
    N602eplus
    Vendor
    Iptime
    Product
    N602eplus Firmware
    Vendor
    Iptime
    Product
    N602se
    Vendor
    Iptime
    Product
    N602se Firmware
    Vendor
    Iptime
    Product
    N604 Black
    Vendor
    Iptime
    Product
    N604 Black Firmware
    Vendor
    Iptime
    Product
    N604a
    Vendor
    Iptime
    Product
    N604a Firmware
    Vendor
    Iptime
    Product
    N604e
    Vendor
    Iptime
    Product
    N604e Firmware
    Vendor
    Iptime
    Product
    N604eplus
    Vendor
    Iptime
    Product
    N604eplus Firmware
    Vendor
    Iptime
    Product
    N604plus
    Vendor
    Iptime
    Product
    N604plus-i
    Vendor
    Iptime
    Product
    N604plus-i Firmware
    Vendor
    Iptime
    Product
    N604plus Firmware
    Vendor
    Iptime
    Product
    N604r
    Vendor
    Iptime
    Product
    N604r Firmware
    Vendor
    Iptime
    Product
    N604rplus
    Vendor
    Iptime
    Product
    N604rplus-i
    Vendor
    Iptime
    Product
    N604rplus-i Firmware
    Vendor
    Iptime
    Product
    N604rplus Firmware
    Vendor
    Iptime
    Product
    N604s
    Vendor
    Iptime
    Product
    N604s Firmware
    Vendor
    Iptime
    Product
    N604se
    Vendor
    Iptime
    Product
    N604se Firmware
    Vendor
    Iptime
    Product
    N604t
    Vendor
    Iptime
    Product
    N604t Firmware
    Vendor
    Iptime
    Product
    N604tplus
    Vendor
    Iptime
    Product
    N604tplus Firmware
    Vendor
    Iptime
    Product
    N604v
    Vendor
    Iptime
    Product
    N604v Firmware
    Vendor
    Iptime
    Product
    N604vplus
    Vendor
    Iptime
    Product
    N604vplus Firmware
    Vendor
    Iptime
    Product
    N6 Firmware
    Vendor
    Iptime
    Product
    N7004ns
    Vendor
    Iptime
    Product
    N7004ns Firmware
    Vendor
    Iptime
    Product
    N702bcm
    Vendor
    Iptime
    Product
    N702bcm Firmware
    Vendor
    Iptime
    Product
    N702e
    Vendor
    Iptime
    Product
    N702e Firmware
    Vendor
    Iptime
    Product
    N702eplus
    Vendor
    Iptime
    Product
    N702eplus Firmware
    Vendor
    Iptime
    Product
    N702r
    Vendor
    Iptime
    Product
    N702r Firmware
    Vendor
    Iptime
    Product
    N704-a3
    Vendor
    Iptime
    Product
    N704-a3 Firmware
    Vendor
    Iptime
    Product
    N704bcm
    Vendor
    Iptime
    Product
    N704bcm Firmware
    Vendor
    Iptime
    Product
    N704e
    Vendor
    Iptime
    Product
    N704e Firmware
    Vendor
    Iptime
    Product
    N704eplus
    Vendor
    Iptime
    Product
    N704eplus Firmware
    Vendor
    Iptime
    Product
    N704ns
    Vendor
    Iptime
    Product
    N704ns Firmware
    Vendor
    Iptime
    Product
    N704qca
    Vendor
    Iptime
    Product
    N704qca Firmware
    Vendor
    Iptime
    Product
    N704v3
    Vendor
    Iptime
    Product
    N704v3 Firmware
    Vendor
    Iptime
    Product
    N8004r
    Vendor
    Iptime
    Product
    N8004r Firmware
    Vendor
    Iptime
    Product
    N8004v
    Vendor
    Iptime
    Product
    N8004v Firmware
    Vendor
    Iptime
    Product
    N804
    Vendor
    Iptime
    Product
    N804 Firmware
    Vendor
    Iptime
    Product
    N804a
    Vendor
    Iptime
    Product
    N804a3
    Vendor
    Iptime
    Product
    N804a3 Firmware
    Vendor
    Iptime
    Product
    N804a Firmware
    Vendor
    Iptime
    Product
    N804r
    Vendor
    Iptime
    Product
    N804r Firmware
    Vendor
    Iptime
    Product
    N804t
    Vendor
    Iptime
    Product
    N804t3
    Vendor
    Iptime
    Product
    N804t3 Firmware
    Vendor
    Iptime
    Product
    N804t Firmware
    Vendor
    Iptime
    Product
    N804v
    Vendor
    Iptime
    Product
    N804v Firmware
    Vendor
    Iptime
    Product
    N904
    Vendor
    Iptime
    Product
    N904 Firmware
    Vendor
    Iptime
    Product
    N904ns
    Vendor
    Iptime
    Product
    N904ns Firmware
    Vendor
    Iptime
    Product
    N904plus
    Vendor
    Iptime
    Product
    N904plus Firmware
    Vendor
    Iptime
    Product
    N904v
    Vendor
    Iptime
    Product
    N904v Firmware
    Vendor
    Iptime
    Product
    Q1
    Vendor
    Iptime
    Product
    Q1 Firmware
    Vendor
    Iptime
    Product
    Q304
    Vendor
    Iptime
    Product
    Q304 Firmware
    Vendor
    Iptime
    Product
    Q504
    Vendor
    Iptime
    Product
    Q504 Firmware
    Vendor
    Iptime
    Product
    Q604
    Vendor
    Iptime
    Product
    Q604 Firmware
    Vendor
    Iptime
    Product
    Smart
    Vendor
    Iptime
    Product
    Smart Firmware
    Vendor
    Iptime
    Product
    T16000
    Vendor
    Iptime
    Product
    T16000 Firmware
    Vendor
    Iptime
    Product
    T16000m
    Vendor
    Iptime
    Product
    T16000m Firmware
    Vendor
    Iptime
    Product
    T24000
    Vendor
    Iptime
    Product
    T24000 Firmware
    Vendor
    Iptime
    Product
    T24000m
    Vendor
    Iptime
    Product
    T24000m Firmware
    Vendor
    Iptime
    Product
    T3004
    Vendor
    Iptime
    Product
    T3004 Firmware
    Vendor
    Iptime
    Product
    T3008
    Vendor
    Iptime
    Product
    T3008 Firmware
    Vendor
    Iptime
    Product
    T5004
    Vendor
    Iptime
    Product
    T5004 Firmware
    Vendor
    Iptime
    Product
    T5008
    Vendor
    Iptime
    Product
    T5008 Firmware
    Vendor
    Iptime
    Product
    V304
    Vendor
    Iptime
    Product
    V304 Firmware
    Vendor
    Iptime
    Product
    V504
    Vendor
    Iptime
    Product
    V504 Firmware
    Vendor
    Iptime
    Product
    V508
    Vendor
    Iptime
    Product
    V508 Firmware

    Exploits

    https://github.com/0x0xxxx/CVE/blob/main/CVE-2025-55423/README.mdhttps://github.com/logis11/CVE-2025-55423-analysis-and-reproduction

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High