Threats tagged 'ghsa-m3xj-gqh8-33xm'

A command injection vulnerability exists in EFM ipTIME C200 devices up to version 1.092. The flaw is in the ApplyRestore Endpoint component, specifically in the sub_408F90 function of /cgi/iux_set.cgi, where manipulation of the RestoreFile argument allows remote attackers to execute arbitrary commands. Public exploit code is available, but the vendor has not responded or issued a patch.