CVE-2021-26614CWE-749

IpTime C200 IP camera remote code execution vulnerability

High · published November 22, 2021

CVSS v3.1
7.5
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

ius_get.cgi in IpTime C200 camera allows remote code execution. A remote attacker may send a crafted parameters to the exposed vulnerable web service interface which invokes the arbitrary shell command.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02535 · 84.8th percentile
Weakness
CWE-749 · Exposed Dangerous Method or Function
Published
2021-11-22T14:38Z
EPSS history
Timeline
  • 22 NOV 14:38Z
    IpTime C200 IP camera remote code execution vulnerability
    cvelistv5