Vulnerabilidades en EFM
13 resultadosAnálisis Vexday
EFM apresenta um perfil de risco moderado com 8 vulnerabilidades catalogadas, sendo 2 críticas, embora nenhuma esteja sob ataque ativo no momento. A fraqueza dominante é CWE-119 (buffer overflow), indicando deficiências estruturais no tratamento de memória; a publicação recente de 3 CVEs nos últimos 90 dias sugere descobertas contínuas, exigindo monitoramento próximo da cadeia de patches.
CVE-2026-7833HIGHEFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injectionEPSS 4.4%CVE-2026-90847CRITICALEFM ipTIME C200E System Setup iux_set.cgi os command injectionEPSS 3.4%CVE-2026-19379MEDIUMEFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injectionEPSS 2.7%CVE-2025-14485LOWEFM ipTIME A3004T Administrator Password timepro.cgi show_debug_screen command injectionEPSS 1.8%CVE-2026-78167CRITICALEFM ipTIME T16000M Session Validation httpcon_check_session_url improper authenticationEPSS 1.5%CVE-2026-19977CRITICALEFM ipTIME A3004T Session Validation httpcon_check_session_url improper authenticationEPSS 1.3%CVE-2026-78168CRITICALEFM ipTIME T24000M Session Validation httpcon_check_session_url improper authenticationEPSS 1.3%CVE-2026-7834CRITICALEFM ipTIME NAS1dual misc_main.cgi get_csrf_whites stack-based overflowEPSS 1.0%CVE-2026-2550CRITICALEFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted uploadEPSS 0.9%CVE-2026-8234HIGHEFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based overflowEPSS 0.8%CVE-2026-1741HIGHEFM ipTIME A8004T Debug d.cgi httpcon_check_session_url backdoorEPSS 0.7%CVE-2026-1740MEDIUMEFM ipTIME A8004T Hidden Hiddenloginsetup timepro.cgi httpcon_check_session_url improper authenticationEPSS 0.5%CVE-2026-1742MEDIUMEFM ipTIME A8004T VPN Service timepro.cgi commit_vpncli_file_upload unrestricted uploadEPSS 0.4%