Approved changes feed: RSS · Atom

cpe:2.3:o:iptime:c200_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorIptime (69a84ece-40c0-535c-bd6b-7ba9d09bbfbc)
ProductC200 Firmware (0e6fba62-1d8b-50f1-a6de-89ab6d5bb9f9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-26614 vulnerable 2026-06-08 05:30:44.961928 IpTime C200 IP camera remote code execution vulnerability
HIGH (7.5)
ius_get.cgi in IpTime C200 camera allows remote code execution. A remote attacker may send a crafted parameters to the exposed vulnerable web service interface which invokes the arbitrary shell command.
Published: 2021-11-22T14:38:24.000Z
Updated: 2024-08-03T20:26:25.515Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7879 vulnerable 2026-06-08 05:27:14.458201 ipTIME C200 IP Camera command injection vulnerability
HIGH (8.8)
This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME IP camera because the ipTIME NAS send ans setCookie('[COOKIE]') . The value is transferred to the --header option in wget binary, and there is no validation check. This vulnerability allows remote attackers to execute remote command.
Published: 2021-11-30T18:37:29.000Z
Updated: 2024-08-04T09:41:01.886Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.