EFM-Networks vulnerabilities
We track 3 vulnerabilities in EFM-Networks products across 5 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 27, 2026.
Latest EFM-Networks vulnerabilities
- 7.5 High severity
ipTIME T5008: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Networks, Inc. IpTIME AX2004M, EFM-Networks, Inc. IpTIME AX3000Q, EFM-Networks, Inc. IpTIME AX6000M allows Authentication Bypass.This issue affects
- 8.8 High severity
NAS1dual, NAS2dual, NAS4dual: Cross-Site Request Forgery
This vulnerability occurs in user accounts creation and deleteion related pages of IPTIME NAS products. The vulnerability could be exploited by a lack of validation when a POST request is made to this page. An attacker can use this vulnerability to or delete u
- 8.8 High severity
NAS1dual, NAS2dual, NAS4dual: Cross-Site Request Forgery
This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request.