What is CVE-2021-26614?

CVE-2021-26614 is a high-severity vulnerability in Efm Networks & Multimedia Iptime C200 Ip Camera, classified under CWE-749. CVSS score: 7.5/10. Published 2021-11-22.

How severe is CVE-2021-26614?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Efm Networks & Multimedia Iptime C200 Ip Camera

CVE-2021-26614

ius_get.cgi in IpTime C200 camera allows remote code execution. A remote attacker may send a crafted parameters to the exposed vulnerable web service interface which invokes the arbitrary shell command.

EPSS: 0.025 (82.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Efm Networks & Multimedia Iptime C200 Ip Camera — versions 1.058
Iptime C200
Iptime C200_firmware

Weakness classification (CWE)

CWE-749

References

vuln@krcert.or.kr (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-26614?: CVE-2021-26614 is a high-severity vulnerability in Efm Networks & Multimedia Iptime C200 Ip Camera, classified under CWE-749. CVSS score: 7.5/10. Published 2021-11-22.
How severe is CVE-2021-26614?: High severity. CVSS v3 base score is 7.5 out of 10.