A critical authentication bypass vulnerability in the EFM ipTIME T16000M router allows remote attackers to fully compromise the device without requiring valid credentials.

The flaw resides in the httpcon_check_session_url function, which fails to correctly validate user sessions. This allows an unauthenticated remote attacker to bypass authentication mechanisms entirely and interact with the device as an administrator.

An authentication bypass on a network router is a catastrophic security failure. It grants an attacker full administrative control over the network gateway, potentially allowing them to monitor all organizational traffic, modify routing configurations, or intercept sensitive communications. With a CVSS score of 10.0, this vulnerability must be treated as the highest priority.

Immediate Action: Isolate the affected devices from the internet immediately. Since the vendor has not responded to disclosure, assume no official patch is currently forthcoming.

Proactive Monitoring: Monitor network logs for unusual administrative logins or access requests that bypass standard login prompts.

Compensating Controls: Disable remote management features entirely. If remote management is required, restrict access to specific management IP addresses via a VPN or an external firewall.

Public Exploit Available: No (No confirmed weaponized exploit or public repository identified in curated data).

Given the lack of vendor engagement and the severity of the flaw, organizations should consider replacing the affected hardware if a firmware update is not released promptly. Security teams must enforce strict perimeter controls to prevent unauthorized remote access to the management interface.