C200 Firmware

c200_firmware

Vendor: Iptime • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-7879 1Iptime 1C200 Firmware Jun 17, 2026 Nov 30, 2021 N/A· v4 9.8 CRITICAL· v3 6.8 MEDIUM· v2 This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME IP camera because the ipTIME NAS send ans setCookie('[COOKIE]') . The value is tr...Show more This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME IP camera because the ipTIME NAS send ans setCookie('[COOKIE]') . The value is transferred to the --header option in wget binary, and there is no validation check. This vulnerability allows remote attackers to execute remote command.Show less
CVE-2021-26614 1Iptime 1C200 Firmware Jun 17, 2026 Nov 22, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 ius_get.cgi in IpTime C200 camera allows remote code execution. A remote attacker may send a crafted parameters to the exposed vulnerable web service interface which invokes the arbitrary shell command.
CVE-2020-7848 1Iptime 1C200 Firmware Jun 17, 2026 Feb 17, 2021 N/A· v4 8.0 HIGH· v3 7.7 HIGH· v2 The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cook...Show more The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value.Show less