Iptime A3004T
Monthly
Authentication bypass in EFM ipTIME A3004T (firmware 14.19.0) lets remote attackers defeat session validation through the httpcon_check_session_url function, granting unauthorized access to the router's web management interface. Publicly available exploit code exists, though the flaw is not yet listed in CISA KEV. The vendor was notified but did not respond, so no fix is currently available.
Authentication bypass in EFM ipTIME A3004T (firmware 14.19.0) lets remote attackers defeat session validation through the httpcon_check_session_url function, granting unauthorized access to the router's web management interface. Publicly available exploit code exists, though the flaw is not yet listed in CISA KEV. The vendor was notified but did not respond, so no fix is currently available.