CVE-2026-78168

Summary

A security vulnerability has been detected in EFM ipTIME T24000M up to 14.20.0. This affects the function httpcon_check_session_url of the component Session Validation Handler. Such manipulation leads to improper authentication. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

VendorProductVersion RangeStatus
EFMipTIME T24000M14.0affected
EFMipTIME T24000M14.1affected
EFMipTIME T24000M14.2affected
EFMipTIME T24000M14.3affected
EFMipTIME T24000M14.4affected
EFMipTIME T24000M14.5affected
EFMipTIME T24000M14.6affected
EFMipTIME T24000M14.7affected
EFMipTIME T24000M14.8affected
EFMipTIME T24000M14.9affected
EFMipTIME T24000M14.10affected
EFMipTIME T24000M14.11affected
EFMipTIME T24000M14.12affected
EFMipTIME T24000M14.13affected
EFMipTIME T24000M14.14affected
EFMipTIME T24000M14.15affected
EFMipTIME T24000M14.16affected
EFMipTIME T24000M14.17affected
EFMipTIME T24000M14.18affected
EFMipTIME T24000M14.19affected
EFMipTIME T24000M14.20.0affected

Weaknesses

  • CWE-287: Improper Authentication

References