A3 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-55423 Jan 20, 18:16 CRITICAL POC Act Now

Multiple ipTIME router models have a command injection vulnerability in the upnp_relay() function, allowing remote attackers to execute arbitrary OS commands through crafted UPnP requests.

Command Injection A1 Firmware A1004 Firmware A1004ns Firmware A1004v Firmware +160

NVD GitHub

CVSS 3.1

9.8

EPSS

0.6%

CVE-2019-15475 Nov 14, 17:15 MEDIUM This Month

The Xiaomi Mi A3 Android device with a build fingerprint of xiaomi/onc_eea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys contains a pre-installed app with a package name of. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Google Qualcomm A3 Firmware Mi

NVD

CVSS 3.1

5.5

EPSS

0.3%

CVE-2025-55423

EPSS 1% CVSS 9.8

CRITICAL POC Act Now

Multiple ipTIME router models have a command injection vulnerability in the upnp_relay() function, allowing remote attackers to execute arbitrary OS commands through crafted UPnP requests.

Command Injection A1 Firmware A1004 Firmware +162

NVD GitHub

CVE-2019-15475

EPSS 0% CVSS 5.5

MEDIUM This Month

Authentication Bypass Google Qualcomm +2

NVD