Vulnerability Details CVE-2020-7848
The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 85.6%
CVSS Severity
CVSS v3 Score 8.0
CVSS v2 Score 7.7
References
Products affected by CVE-2020-7848
-
cpe:2.3:h:iptime:c200:-
-
cpe:2.3:o:iptime:c200_firmware:1.0.12