CVE-2025-14485Medium· 5.0▾ SunlitA weakness has been identified in EFM ipTIME A3004T 14.19.0. This vulnerability affects the function show_debug_screen of the file /sess-bin/timepro.cgi of the component Administrator Password Handler. This manipulation of the argument a…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 27.5 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.8%
A weakness has been identified in EFM ipTIME A3004T 14.19.0. This vulnerability affects the function show_debug_screen of the file /sess-bin/timepro.cgi of the component Administrator Password Handler. This manipulation of the argument aaksjdkfj with the input !@dnjsrureljrm*& causes command injection. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is stated that the exploitability is difficult. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-10963Medium· 6.3A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425
CVE-2025-10964Medium· 6.3A weakness has been identified in Wavlink NU516U1
CVE-2025-10959Medium· 6.3A vulnerability has been found in Wavlink NU516U1 M16U1_V240425
CVE-2025-10960Medium· 6.3A vulnerability was found in Wavlink NU516U1 M16U1_V240425
CVE-2025-10961Medium· 5.5A vulnerability was determined in Wavlink NU516U1 M16U1_V240425
CVE-2025-10962Medium· 6.3A vulnerability was identified in Wavlink NU516U1 M16U1_V240425