Ip-com vulnerabilities
We track 8 vulnerabilities in Ip-com products across 4 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on February 6, 2026.
Latest Ip-com vulnerabilities
- 9.8 Critical severity
W30AP: Out-of-bounds Write
A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340). Affected by this issue is the function R7WebsSecurityHandler of the file /goform/wx3auth of the component POST Request Handler. The manipulation of the argument data results in stack-based buff
- 9.8 Critical severity
M50 Firmware: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBindModify function.
- 9.8 Critical severity
M50 Firmware: Improper Neutralization of Special Elements used in an OS Command
IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formSetUSBPartitionUmount function. This vulnerability is exploited via a crafted GET request.
- 9.8 Critical severity
M50 Firmware: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPortMapping function.
- 9.8 Critical severity
M50 Firmware: Improper Neutralization of Special Elements used in an OS Command
IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckTools function.
- 9.8 Critical severity
M50 Firmware: Buffer Copy without Checking Size of Input
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function.
- 9.8 Critical severity
M50 Firmware: Improper Neutralization of Special Elements used in an OS Command
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function.
- 7.5 High severity
Ew9 Firmware: Buffer Copy without Checking Size of Input
IP-COM EW9 V15.11.0.14(9732) was discovered to contain a buffer overflow in the formSetDebugCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.