Skip to content
OpenAdvisories
Critical ICSA-21-208-03 12 CVEs

Geutebrück G-Cam E2 and G-Code

Published Jul 27, 2021 · Updated Jul 27, 2021

Vendor: Geutebrück Product: EBC-21xx Product: EEC-2xx Product: EEN-20xx Product: EFD-22xx Product: ETHC-22xx Product: EWPC-22xx

Summary

UDP Technology supplies multiple OEMs such as Geutebrück with firmware for IP cameras. Successful exploitation of these vulnerabilities could allow unauthenticated access to sensitive information; buffer overflow and command injection conditions may allow remote code execution.

Vulnerabilities 12

  • Critical 9.8
    CVE-2021-33543 Public exploit EPSS 81%

    UDP Technology/Geutebrück camera devices: Authentication Bypass

    Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.

    Geutebrück Encoder G-Code E2 Series
  • High 7.2
    CVE-2021-33544 Public exploit Scanner template EPSS 96%

    UDP Technology/Geutebrück camera devices: command injection leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

    Geutebrück E2 Series Encoder G-Code
  • High 7.2
    CVE-2021-33545

    UDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code.

    Geutebrück Encoder G-Code E2 Series
  • High 7.2
    CVE-2021-33546

    UDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code.

    Geutebrück E2 Series Encoder G-Code
  • High 7.2
    CVE-2021-33547

    UDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code.

    Geutebrück Encoder G-Code E2 Series
  • High 7.2
    CVE-2021-33548 Public exploit EPSS 59%

    UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

    Geutebrück E2 Series Encoder G-Code
  • High 7.2
    CVE-2021-33549 Public exploit EPSS 67%

    UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code.

    Geutebrück Encoder G-Code E2 Series
  • High 7.2
    CVE-2021-33550 Public exploit EPSS 59%

    UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

    Geutebrück Encoder G-Code E2 Series
  • High 7.2
    CVE-2021-33551 Public exploit EPSS 51%

    UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

    Geutebrück E2 Series Encoder G-Code
  • High 7.2
    CVE-2021-33552 Public exploit EPSS 51%

    UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

    Geutebrück Encoder G-Code E2 Series
  • High 7.2
    CVE-2021-33553 Public exploit EPSS 51%

    UDP Technology/Geutebrück camera devices: Command injection in command parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

    Geutebrück E2 Series Encoder G-Code
  • High 7.2
    CVE-2021-33554 Public exploit EPSS 59%

    UDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE

    Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

    Geutebrück Encoder G-Code E2 Series

Revision history

  1. #1

    ICSA-21-208-03 Geutebrück G-Cam E2 and G-Code

References