Beveiligingsadvies

CVE-2020-7848

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-02-17 13:29:52
Laatst bijgewerkt 2024-08-04 09:41:01
Toegewezen door krcert
CVSS-score 8.0
Status PUBLISHED

Beschrijving

The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value.