Vulnerabilities

CVE-2020-7848

February 18, 2021

The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value.

Summary:

Reference Links(if available):

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35905

CVSS Score (if available)

v2: / MEDIUM

v3: /

Links to Exploits(if available)

Cobalt Strike Beacon Detected – 52[.]231[.]10[.]139:8080

November 23, 2024

Cobalt Strike Beacon Detected – 54[.]224[.]145[.]120:443

November 23, 2024

Cobalt Strike Beacon Detected – 118[.]193[.]37[.]157:8889

November 23, 2024

Cobalt Strike Beacon Detected – 103[.]225[.]196[.]197:80

November 23, 2024

Cobalt Strike Beacon Detected – 101[.]201[.]247[.]232:4433

November 23, 2024

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

Cobalt Strike Beacon Detected – 52[.]231[.]10[.]139:8080

Cobalt Strike Beacon Detected – 54[.]224[.]145[.]120:443

Cobalt Strike Beacon Detected – 118[.]193[.]37[.]157:8889

Cobalt Strike Beacon Detected – 103[.]225[.]196[.]197:80

Cobalt Strike Beacon Detected – 101[.]201[.]247[.]232:4433