Skip to content
OpenAdvisories
High · 7.5 CVE-2021-26614 EUVD-2021-13408GHSA-92m5-7gm4-grc4

IpTime C200 IP camera remote code execution vulnerability

Published Nov 22, 2021 · Updated Aug 3, 2024 · Assigned by krcert

Description

ius_get.cgi in IpTime C200 camera allows remote code execution. A remote attacker may send a crafted parameters to the exposed vulnerable web service interface which invokes the arbitrary shell command.

Affected products

VendorProductAffectedFixed
EFM networks & multimedia ipTIME C200 IP Camera 1.058 – ≤ 1.058 —

References