Improper Authentication in EFM ipTIME T24000M Devices
⚠️ CVE-Referenzen:
CVE-2026-78167
CVE-2026-78168
Efm - Iptime T24000m - CRITICAL - CVE-2026-78168.
A vulnerability in the EFM ipTIME T24000M model compromises the function responsible for checking session URLs, leading to improper authentication. This flaw can be exploited remotely, posing a significant risk as it allows potential attackers to manipulate the authentication process without proper oversight. Despite early outreach to the vendor regarding this issue, no response has been noted, elevating concerns over the security of unpatched devices running versions up to 14.20.0. It is vital for users to address this vulnerability promptly to safeguard their networks.
BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io
Quelle: securityvulnerability.io