An OS command injection vulnerability in the ccm_debug component of MIPC Camera firmware prior to v5.4.1.240424171021 allows attackers within the same network to execute arbitrary code via a crafted HTML request.
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')