High severity7.4NVD Advisory· Published Feb 23, 2021· Updated Jun 17, 2026

CVE-2020-7847

Description

The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36.

Affected products

Iptime/Nas I Firmware
cpe:2.3:o:iptime:nas-i_firmware:*:*:*:*:*:*:*:*
Range: <1.4.36
Iptime/Nas Ii Firmware
cpe:2.3:o:iptime:nas-ii_firmware:*:*:*:*:*:*:*:*
Range: <1.4.36
Iptime/Nas Iie Firmware
cpe:2.3:o:iptime:nas-iie_firmware:*:*:*:*:*:*:*:*
Range: <1.4.36
Iptime/Nas101 Firmware
cpe:2.3:o:iptime:nas101_firmware:*:*:*:*:*:*:*:*
Range: <1.4.36
Iptime/Nas1dual Firmware
cpe:2.3:o:iptime:nas1dual_firmware:*:*:*:*:*:*:*:*
Range: <1.4.36
Iptime/Nas2dual Firmware
cpe:2.3:o:iptime:nas2dual_firmware:*:*:*:*:*:*:*:*
Range: <1.4.36
Iptime/Nas3 Firmware
cpe:2.3:o:iptime:nas3_firmware:*:*:*:*:*:*:*:*
Range: <1.4.36
Iptime/Nas4 Firmware
cpe:2.3:o:iptime:nas4_firmware:*:*:*:*:*:*:*:*
Range: <1.4.36
Iptime/Nas4dual Firmware
cpe:2.3:o:iptime:nas4dual_firmware:*:*:*:*:*:*:*:*
Range: <1.4.36
Iptime/NASllm-fuzzy
Range: 1.4.36
EFM Networks/ipTIME NASv5
Range: 1.4.36

cvss	0.481
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2020-7847

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions