Iptime C200 Ip Camera
Approved changes feed: RSS · Atom
cpe:2.3:a:efm_networks_&_multimedia:iptime_c200_ip_camera:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Efm Networks & Multimedia (a072a5f1-a7ba-5b35-8c1e-4acb07c5e34b) |
|---|---|
| Product | Iptime C200 Ip Camera (ee8199c9-5b77-5fab-9172-8dbb7703d547) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-26614 |
vulnerable | 2026-06-08 05:30:44.961140 |
IpTime C200 IP camera remote code execution vulnerability
HIGH (7.5)
ius_get.cgi in IpTime C200 camera allows remote code execution. A remote attacker may send a crafted parameters to the exposed vulnerable web service interface which invokes the arbitrary shell command.
Published: 2021-11-22T14:38:24.000Z
Updated: 2024-08-03T20:26:25.515Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7879 |
vulnerable | 2026-06-08 05:27:14.457303 |
ipTIME C200 IP Camera command injection vulnerability
HIGH (8.8)
This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME IP camera because the ipTIME NAS send ans setCookie('[COOKIE]') . The value is transferred to the --header option in wget binary, and there is no validation check. This vulnerability allows remote attackers to execute remote command.
Published: 2021-11-30T18:37:29.000Z
Updated: 2024-08-04T09:41:01.886Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7848 |
vulnerable | 2026-06-08 05:27:14.399864 |
Details available
HIGH (8)
The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value.
Published: 2021-02-17T13:29:52.000Z
Updated: 2024-08-04T09:41:01.870Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.