Which versions of EFM ipTIME C200E are affected by CVE-2026-90847?

EFM ipTIME C200E network devices running firmware 1.094 contain a critical command injection vulnerability in the System Setup component that allows authenticated administrators to execute arbitrary…

Is there a public PoC exploit available for CVE-2026-90847?

Yes, a public proof-of-concept exploit is available for CVE-2026-90847. Prioritise patching immediately. EPSS: 2.2%.

How to fix or mitigate CVE-2026-90847?

Within 24 hours, create a complete inventory of all EFM ipTIME C200E devices running firmware 1.094 and immediately restrict administrative access by disabling unnecessary admin accounts and reviewing all current administrative credentials. Within 7 days, implement network-level compensating controls including firewall rules that restrict access to the iux_set.cgi endpoint, require VPN or jump-box authentication for all administration, implement IP whitelisting for administrative traffic, and rotate all administrative credentials. Within 30 days, contact EFM for firmware updates beyond version 1.094, and develop a hardware replacement strategy for devices in critical network segments that cannot be patched or adequately isolated.

EFM ipTIME C200E CVE-2026-90847

Q: What is the CVSS score of CVE-2026-90847?

CVE-2026-90847 has a CVSS 4.0 base score of 8.5 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 2.2%.

EUVD-2026-78242 HIGH

OS Command Injection (CWE-78)

2026-09-15 VulDB

GHSA-7cwj-49q5-wgwg

Command Injection Efm Iptime C200E

8.5

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

8.5 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.1 CRITICAL

Network-accessible CGI requires admin auth (PR:H); scope changes to device OS (S:C); full CIA impact on compromised embedded system.

3.1 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

POC Analysis Generated

Sep 15, 2026 - 11:36 vuln.today

Analysis Generated

Sep 15, 2026 - 07:52 vuln.today

Severity Changed

Sep 15, 2026 - 01:22 NVD

CRITICAL HIGH

CVSS changed

Sep 15, 2026 - 01:22 NVD

9.4 (CRITICAL) 8.5 (HIGH)

CVE Published

Sep 15, 2026 - 01:00 cve.org

HIGH 8.5

DescriptionCVE.org

A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iux_set.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

AnalysisAI

OS command injection in EFM ipTIME C200E firmware 1.094 allows an authenticated remote attacker with administrative privileges to execute arbitrary operating system commands via a crafted request to the iux_set.cgi endpoint in the System Setup component. A public proof-of-concept exploit, including a video demonstration, has been disclosed. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires: (1) administrative (PR:H) authentication to the device's web management interface - the vulnerability resides in the System Setup component (iux_set.cgi), which is gated behind admin login; (2) network reachability to the device's HTTP/HTTPS management port (AV:N). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 vector AV:N/AC:L/AT:N/PR:H/UI:N yielding 8.5 correctly reflects the key mitigating factor: PR:H (high privileges required), meaning an attacker must already possess administrative credentials to the device's web interface. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	No vendor-released patch has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, create a complete inventory of all EFM ipTIME C200E devices running firmware 1.094 and immediately restrict administrative access by disabling unnecessary admin accounts and reviewing all current administrative credentials. …

Threat intelligence, references, and detailed analysis are available after sign-in.