Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc. IpTIME T5008, EFM-Networks, Inc. IpTIME AX2004M, EFM-Networks, Inc. IpTIME AX3000Q, EFM-Networks, Inc. IpTIME AX6000M allows Authentication Bypass.This issue affects ipTIME T5008: through 15.26.8; ipTIME AX2004M: through 15.26.8; ipTIME AX3000Q: through 15.26.8; ipTIME AX6000M: through 15.26.8.

INFO

Published Date :

2026-02-27T02:01:12.377Z

Last Modified :

2026-02-27T16:03:35.360Z

Source :

krcert
AFFECTED PRODUCTS

The following products are affected by CVE-2026-24498 vulnerability.

Vendors Products
Efm-networks
  • Iptime Ax2004m
  • Iptime Ax3000q
  • Iptime Ax6000m
  • Iptime T5008
Iptime
  • Ax2004m
  • Ax2004m Firmware
  • Ax3000q
  • Ax3000q Firmware
  • Ax6000m
  • Ax6000m Firmware
  • T5008
  • T5008 Firmware

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact