Deviceways

Router

ipTIME A3004T

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
Hardware revision not specified
Release listed · 25.12.6
Hardware revision not specified
Release listed · 25.12.5
Open hardware recordopenwrt.org
Original project github.com

Recorded configuration: 128NAND MB flash; 256 MB RAM

First installation
GUI OEM
Sources

Features & details

Check the project and hardware shown for each feature.

OpenWrt

OpenWrt — Source documentation (openwrt.org)

Installation routes recorded
GUI OEM
Recovery routes recorded
U-Boot TFTP recovery
Availability recorded by source
Available 2021

Hardware details

Technical references

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 10.0 (v4.0)

ipTIME A3004T

EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication

CVE-2026-19977

Affected firmware
14.19.0
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon_check_session_url of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

VDB-391156 | EFM ipTIME A3004T Session Validation httpcon_check_session_url improper authentication — ipTIME A3004T (vuldb.com) ↗VDB-391156 | CTI Indicators (IOB, IOC, IOA) — ipTIME A3004T (vuldb.com) ↗CVE-2026-19977 | CVE Analysis and Report — ipTIME A3004T (vuldb.com) ↗Submit #873848 | iptime A3004T 14.19.0 Authentication bypass and arbitrary password reset vulnerabiliti — ipTIME A3004T (vuldb.com) ↗
CVE published

CVSS 2.3 (v4.0)

ipTIME A3004T

EFM ipTIME A3004T Administrator Password timepro.cgi show_debug_screen command injection

CVE-2025-14485

Affected firmware
14.19.0
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources
CVE updated

A weakness has been identified in EFM ipTIME A3004T 14.19.0. This vulnerability affects the function show_debug_screen of the file /sess-bin/timepro.cgi of the component Administrator Password Handler. This manipulation of the argument aaksjdkfj with the input !@dnjsrureljrm*& causes command injection. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is stated that the exploitability is difficult. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

VDB-335768 | EFM ipTIME A3004T Administrator Password timepro.cgi show_debug_screen command injection — ipTIME A3004T (vuldb.com) ↗VDB-335768 | CTI Indicators (IOB, IOC, TTP, IOA) — ipTIME A3004T (vuldb.com) ↗Submit #702655 | EFM NETWORKS CO., LTD. ipTime A3004T 14.19.0 Command Injection — ipTIME A3004T (vuldb.com) ↗
Check more security advisories for this device · CVE.org