CVE-2026-24498

Published: Feb 27, 2026Modified: Jun 17, 2026

6.0

Vector

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: vuln@krcert.or.kr (Secondary)

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Networks, Inc. IpTIME AX2004M, EFM-Networks, Inc. IpTIME AX3000Q, EFM-Networks, Inc. IpTIME AX6000M allows Authentication Bypass.This issue affects ipTIME T5008: through 15.26.8; ipTIME AX2004M: through 15.26.8; ipTIME AX3000Q: through 15.26.8; ipTIME AX6000M: through 15.26.8.

Affected (4)

Products: Iptime: T5008 Firmware, Ax2004m Firmware, Ax3000q Firmware, Ax6000m Firmware

4 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Iptime T5008 Firmware	Before 15.27.2

Running on/with	Platform Versions
Iptime T5008	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Iptime Ax2004m Firmware	Before 15.27.2

Running on/with	Platform Versions
Iptime Ax2004m	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Iptime Ax3000q Firmware	Before 15.27.2

Running on/with	Platform Versions
Iptime Ax3000q	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Iptime Ax6000m Firmware	Before 15.27.2

Running on/with	Platform Versions
Iptime Ax6000m	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://iptime.com/iptime/?page_id=126&dffid=1&dfsid=15&dftid=589&uid=26901&mod=document

Source: vuln@krcert.or.kr

Release Notes

https://www.boho.or.kr/kr/bbs/view.do?searchCnd=&bbsId=B0000302&searchWrd=&menuNo=205023&pageIndex=1&categoryCode=&nttId=71987

Source: vuln@krcert.or.kr

Third Party Advisory

Timeline

No history available yet.