Description (CNA)
The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| EFM networks & multimedia / ipTIME C200 IP Camera | affected 1.0.12 through 1.0.12 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.