Description
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Geutebrück | E2 Series | EBC-21xx 1.12.13.2, EBC-21xx 1.12.14.5, EFD-22xx 1.12.13.2, EFD-22xx 1.12.14.5, ETHC-22xx 1.12.13.2, ETHC-22xx 1.12.14.5, EWPC-22xx 1.12.13.2, EWPC-22xx 1.12.14.5, EBC-21xx – ≤ 1.12.0.27, EFD-22xx – ≤ 1.12.0.27, ETHC-22xx – ≤ 1.12.0.27, EWPC-22xx – ≤ 1.12.0.27 | — |
| Geutebrück | Encoder G-Code | EEC-2xx 1.12.13.2, EEC-2xx 1.12.14.5, EEN-20xx 1.12.13.2, EEN-20xx 1.12.14.5, EEC-2xx – ≤ 1.12.0.27, EEN-20xx – ≤ 1.12.0.27 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Geutebruck Multiple Remote Command Execution
exploit/linux/http/geutebruck_cmdinject_cve_2021_335xx
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Geutebruck - Remote Command Injection http/cves/2021/CVE-2021-33544.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- ICSA-21-208-03 Geutebrück G-Cam E2 and G-Code CISA ICS & IT advisories · Jul 27, 2021