Ax2004m Firmware vulnerabilities

2 known vulnerabilities in Ax2004m Firmware from Iptime. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  ipTIME T5008: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-24498Feb 27, 2026EFM-Networks

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Networks, Inc. IpTIME AX2004M, EFM-Networks, Inc. IpTIME AX3000Q, EFM-Networks, Inc. IpTIME AX6000M allows Authentication Bypass.This issue affects

• 9.8 Critical severity

  N104s-r1 Firmware: Improper Control of Generation of Code

  CVE-2025-55423Jan 20, 2026IptimeEPSS 3.74%

  A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system() without proper validation or sanitization, all