iptime
Security Risk Profile
65
/100
highSecurity Risk Score
Comprehensive risk assessment based on 15 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 17, 2021 to present
15
Total CVEs
11
Critical+High
0
Exploited
11
Unpatched
Threat Assessment
Avg CVSS
8.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
11
Critical/High
Risk Level
65/100
high
Severity Distribution
Critical
4High
7Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Malicious File Upload
2
2
Command Injection
2
3
OS Command Injection
2
4
CSRF
2
5
Infoleak
1
Most Affected Products
1. IPTIME A8004t Firmware4
2. EFM ipTIME A8004T3
3. IPTIME Nas1dual Firmware3
4. IPTIME Nas2dual Firmware3
5. IPTIME Nas4dual Firmware3
Recent Vulnerabilities
See more →CVE-2026-24498
CVSS 7.5high
2/27/2026🔧 No Patch
CVE-2026-1742
CVSS 7.2high
EFM ipTIME A8004T VPN Service timepro.cgi commit_vpncli_file_upload unrestricted upload
2/2/2026🔧 No Patch
CVE-2026-1741
CVSS 6.8medium
EFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoor
2/2/2026🔧 No Patch
CVE-2026-1740
CVSS 9.8critical
EFM ipTIME A8004T Hidden Hiddenloginsetup timepro.cgi httpcon_check_session_url improper authentication
2/2/2026🔧 No Patch
CVE-2025-55423
CVSS 9.8critical
1/20/2026🔧 No Patch
CVE-2025-50464
CVSS 6.5medium
7/30/2025🔧 No Patch
CVE-2024-54763
CVSS 6.5medium
1/6/2025🔧 No Patch
CVE-2024-54764
CVSS 6.5medium
1/6/2025🔧 No Patch
CVE-2022-23771
CVSS 8.8high
IPTIME NAS1DUAL CSRF Vulnerability
10/17/2022🔧 No Patch
CVE-2022-23765
CVSS 8.8high
IPTIME NAS family CSRF vulnerability
8/17/2022🔧 No Patch
Monitor iptime in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.