CVE-2020-7848CWE-20

The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script

High · published February 17, 2021

CVSS v3.1
8.0
EPSS
1%
Percentile
66.3
In the wild
Unconfirmed
What it is

The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01136 · 66.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-02-17T13:29Z
EPSS history
Timeline
  • 17 FEB 13:29Z
    The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script
    cvelistv5