Vendor

EFM

2 briefs RSS

EFM ipTIME NAS1dual Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability exists in EFM ipTIME NAS1dual 1.5.24, affecting the get_csrf_whites function in /cgi/advanced/misc_main.cgi, exploitable remotely, and leading to potential arbitrary code execution.

ipTIME NAS1dual 1.5.24 stack-based-buffer-overflow cve-2026-7834 iptime nas webserver

2r 1t 1c 2h ago

critical threat

EFM ipTIME C200 Command Injection Vulnerability

2 rules 1 TTP 1 CVE

EFM ipTIME C200 devices are vulnerable to remote command injection due to insufficient validation of the RestoreFile argument in the /cgi/iux_set.cgi endpoint, allowing attackers to execute arbitrary commands with elevated privileges.

ipTIME C200 command injection iot cve-2026-7833

2r 1t 1c 3h ago