{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2025-55423", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-01-21T14:42:40.553Z", "dateReserved": "2025-08-13T00:00:00.000Z", "datePublished": "2026-01-20T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-01-20T17:37:00.124Z"}, "descriptions": [{"lang": "en", "value": "ipTIME routers A2003NS-MU 10.00.6 to 12.16.2 , N600 10.00.8 to 12.16.2, A604-V3 10.01.6 to 10.07.2, A6ns-M 10.01.6 to 14.19.4 , V508 10.02.2 to 10.06.4, N704QCA 10.02.4 to 12.16.2, A8ns-M 10.03.2 to 14.19.4, A304 10.05.4 to 10.07.4, A3004NS-M,A5004NS-M,A9004M 10.05.4 to 14.19.4, N702R 10.05.8 to 10.06.8, A604M 10.06.4 to 10.07.2, A804NS-MU 10.06.4 to 12.10.2, N804R 10.06.4 to 12.16.2, A7004M,A8004T 10.06.8 to 14.19.4, A604G-MU 10.07.4 to 12.16.2, A3008-MU 10.08.4 to 14.19.4, A2004MU and A2004NS-MU 10.08.6 to 12.17.0, A604-V5,A604R, N702E 10.09.2 to 12.16.2, N2V 10.09.2 to 12.16.8, N604E 10.09.2 to 14.19.4, N104E 10.09.4 to 12.15.2, A8004ITL 11.00.4 to 14.19.4, N102E 11.00.8 to 12.15.2, N1V 11.01.2 to 12.07.6, N102i 11.01.2 to 12.15.2, T5004 11.96.4 to 14.19.4, N602E 11.96.6 to 12.16.8, AX8004BCM and A8004T-XR 11.97.2 to 14.19.4, A9004M-X2, T5008 11.98.2 to 14.19.4, N704E 11.98.4 to 12.16.2, A8004BCM 11.99.1 to 12.16.2, AX3004ITL 12.01.2 to 14.19.4 and A604G-skylife 12.02.4 to 12.12 were discovered to contain an OS command injection vulnerability via the function upnp_relay()."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://iptime.com/iptime/?pageid=4&page_id=126&dfsid=3&dftid=583&uid=25203&mod=document"}, {"url": "https://docs.google.com/spreadsheets/d/1kryOFltCmnPJvDTpIrudgryt79uI4PWchuQ8-Gak24c/edit?usp=sharing"}, {"url": "https://github.com/0x0xxxx/CVE/blob/main/CVE-2025-55423/README.md"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-94", "lang": "en", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-01-21T14:40:51.505195Z", "id": "CVE-2025-55423", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-21T14:42:40.553Z"}}]}, "dataVersion": "5.2"}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "ipTIME routers A2003NS-MU 10.00.6 to 12.16.2 , N600 10.00.8 to 12.16.2, A604-V3 10.01.6 to 10.07.2, A6ns-M 10.01.6 to 14.19.4 , V508 10.02.2 to 10.06.4, N704QCA 10.02.4 to 12.16.2, A8ns-M 10.03.2 to 14.19.4, A304 10.05.4 to 10.07.4, A3004NS-M,A5004NS-M,A9004M 10.05.4 to 14.19.4, N702R 10.05.8 to 10.06.8, A604M 10.06.4 to 10.07.2, A804NS-MU 10.06.4 to 12.10.2, N804R 10.06.4 to 12.16.2, A7004M,A8004T 10.06.8 to 14.19.4, A604G-MU 10.07.4 to 12.16.2, A3008-MU 10.08.4 to 14.19.4, A2004MU and A2004NS-MU 10.08.6 to 12.17.0, A604-V5,A604R, N702E 10.09.2 to 12.16.2, N2V 10.09.2 to 12.16.8, N604E 10.09.2 to 14.19.4, N104E 10.09.4 to 12.15.2, A8004ITL 11.00.4 to 14.19.4, N102E 11.00.8 to 12.15.2, N1V 11.01.2 to 12.07.6, N102i 11.01.2 to 12.15.2, T5004 11.96.4 to 14.19.4, N602E 11.96.6 to 12.16.8, AX8004BCM and A8004T-XR 11.97.2 to 14.19.4, A9004M-X2, T5008 11.98.2 to 14.19.4, N704E 11.98.4 to 12.16.2, A8004BCM 11.99.1 to 12.16.2, AX3004ITL 12.01.2 to 14.19.4 and A604G-skylife 12.02.4 to 12.12 were discovered to contain an OS command injection vulnerability via the function upnp_relay()."}], "id": "CVE-2025-55423", "lastModified": "2026-01-20T18:16:04.810", "metrics": {}, "published": "2026-01-20T18:16:04.810", "references": [{"source": "cve@mitre.org", "url": "https://docs.google.com/spreadsheets/d/1kryOFltCmnPJvDTpIrudgryt79uI4PWchuQ8-Gak24c/edit?usp=sharing"}, {"source": "cve@mitre.org", "url": "https://github.com/0x0xxxx/CVE/blob/main/CVE-2025-55423/README.md"}, {"source": "cve@mitre.org", "url": "https://iptime.com/iptime/?pageid=4&page_id=126&dfsid=3&dftid=583&uid=25203&mod=document"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Received"}

{}

{"created": "2026-01-21T11:20:01.485419+00:00", "updated": "2026-01-21T11:20:01.485446+00:00", "vendors": ["iptime", "iptime$PRODUCT$a2003ns-mu", "iptime$PRODUCT$a2004mu", "iptime$PRODUCT$a2004ns-mu", "iptime$PRODUCT$a3004ns-m", "iptime$PRODUCT$a3008-mu", "iptime$PRODUCT$a304", "iptime$PRODUCT$a5004ns-m", "iptime$PRODUCT$a604-v3", "iptime$PRODUCT$a604-v5", "iptime$PRODUCT$a604g-mu", "iptime$PRODUCT$a604g-skylife", "iptime$PRODUCT$a604m", "iptime$PRODUCT$a604r", "iptime$PRODUCT$a6ns-m", "iptime$PRODUCT$a7004m", "iptime$PRODUCT$a8004bcm", "iptime$PRODUCT$a8004itl", "iptime$PRODUCT$a8004t", "iptime$PRODUCT$a8004t-xr", "iptime$PRODUCT$a804ns-mu", "iptime$PRODUCT$a8ns-m", "iptime$PRODUCT$a9004m", "iptime$PRODUCT$a9004m-x2", "iptime$PRODUCT$ax3004itl", "iptime$PRODUCT$ax8004bcm", "iptime$PRODUCT$n102e", "iptime$PRODUCT$n102i", "iptime$PRODUCT$n104e", "iptime$PRODUCT$n1v", "iptime$PRODUCT$n2v", "iptime$PRODUCT$n600", "iptime$PRODUCT$n602e", "iptime$PRODUCT$n604e", "iptime$PRODUCT$n702e", "iptime$PRODUCT$n702r", "iptime$PRODUCT$n704e", "iptime$PRODUCT$n704qca", "iptime$PRODUCT$n804r", "iptime$PRODUCT$t5004", "iptime$PRODUCT$t5008", "iptime$PRODUCT$v508"]}