A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iux_set.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

A critical OS command injection vulnerability has been identified in EFM ipTIME C200E firmware version 1.094. The vulnerability resides in an unknown function within the iux_set.cgi file of the System Setup component. An attacker can remotely exploit this vulnerability to inject and execute arbitrary OS commands on the affected device. The exploit has been publicly disclosed, increasing the risk of active exploitation. The attack can be initiated remotely without physical access to the device. This type of vulnerability in network-connected devices poses significant risks to network security and integrity. The public availability of exploit details elevates the urgency for patching or mitigation.