Cross-site scripting in Geutebruck IP Cameras
Priority LOW 24CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.
Summary
Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in code execution within the user’s browser.
Why it matters now
EPSS 0.00935 60th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Geutebruck IP Cameras | G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior | — | No fix listed | CNA |
- Geutebruck IP Cameras Vendor— Affected G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior Fixed in — No fix listed CNA
CPE configurations NVD · 22
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:geutebrueck:g-code_eec-2400_firmware:*:*:*:*:*:*:*:* | up to 1.12.0.25 | Vulnerable | Geutebrück |
| cpe:2.3:h:geutebrueck:g-code_eec-2400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Geutebrück |
| cpe:2.3:o:geutebrueck:g-cam_ebc-2110_firmware:*:*:*:*:*:*:*:* | up to 1.12.0.25 | Vulnerable | Geutebrück |
| cpe:2.3:h:geutebrueck:g-cam_ebc-2110:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Geutebrück |
| cpe:2.3:o:geutebrueck:g-cam_ebc-2111_firmware:*:*:*:*:*:*:*:* | up to 1.12.0.25 | Vulnerable | Geutebrück |
| cpe:2.3:h:geutebrueck:g-cam_ebc-2111:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Geutebrück |
| cpe:2.3:o:geutebrueck:g-cam_efd-2240_firmware:*:*:*:*:*:*:*:* | up to 1.12.0.25 | Vulnerable | Geutebrück |
| cpe:2.3:h:geutebrueck:g-cam_efd-2240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Geutebrück |
| cpe:2.3:o:geutebrueck:g-cam_efd-2241_firmware:*:*:*:*:*:*:*:* | up to 1.12.0.25 | Vulnerable | Geutebrück |
| cpe:2.3:h:geutebrueck:g-cam_efd-2241:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Geutebrück |
- cpe:2.3:o:geutebrueck:g-code_eec-2400_firmware:*:*:*:*:*:*:*:* Versions up to 1.12.0.25 Vulnerable ·Geutebrück
- cpe:2.3:h:geutebrueck:g-code_eec-2400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Geutebrück
- cpe:2.3:o:geutebrueck:g-cam_ebc-2110_firmware:*:*:*:*:*:*:*:* Versions up to 1.12.0.25 Vulnerable ·Geutebrück
- cpe:2.3:h:geutebrueck:g-cam_ebc-2110:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Geutebrück
- cpe:2.3:o:geutebrueck:g-cam_ebc-2111_firmware:*:*:*:*:*:*:*:* Versions up to 1.12.0.25 Vulnerable ·Geutebrück
- cpe:2.3:h:geutebrueck:g-cam_ebc-2111:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Geutebrück
- cpe:2.3:o:geutebrueck:g-cam_efd-2240_firmware:*:*:*:*:*:*:*:* Versions up to 1.12.0.25 Vulnerable ·Geutebrück
- cpe:2.3:h:geutebrueck:g-cam_efd-2240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Geutebrück
- cpe:2.3:o:geutebrueck:g-cam_efd-2241_firmware:*:*:*:*:*:*:*:* Versions up to 1.12.0.25 Vulnerable ·Geutebrück
- cpe:2.3:h:geutebrueck:g-cam_efd-2241:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Geutebrück
Show 12 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:geutebrueck:g-cam_efd-2250_firmware:*:*:*:*:*:*:*:* | up to 1.12.0.25 | Vulnerable | Geutebrück |
| cpe:2.3:h:geutebrueck:g-cam_efd-2250:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Geutebrück |
| cpe:2.3:o:geutebrueck:g-cam_ethc-2230_firmware:*:*:*:*:*:*:*:* | up to 1.12.0.25 | Vulnerable | Geutebrück |
| cpe:2.3:h:geutebrueck:g-cam_ethc-2230:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Geutebrück |
| cpe:2.3:o:geutebrueck:g-cam_ethc-2240_firmware:*:*:*:*:*:*:*:* | up to 1.12.0.25 | Vulnerable | Geutebrück |
| cpe:2.3:h:geutebrueck:g-cam_ethc-2240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Geutebrück |
| cpe:2.3:o:geutebrueck:g-cam_ethc-2239_firmware:*:*:*:*:*:*:*:* | up to 1.12.0.25 | Vulnerable | Geutebrück |
| cpe:2.3:h:geutebrueck:g-cam_ethc-2239:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Geutebrück |
| cpe:2.3:o:geutebrueck:g-cam_ethc-2249_firmware:*:*:*:*:*:*:*:* | up to 1.12.0.25 | Vulnerable | Geutebrück |
| cpe:2.3:h:geutebrueck:g-cam_ethc-2249:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Geutebrück |
| cpe:2.3:o:geutebrueck:g-cam_ewpc-2270_firmware:*:*:*:*:*:*:*:* | up to 1.12.0.25 | Vulnerable | Geutebrück |
| cpe:2.3:h:geutebrueck:g-cam_ewpc-2270:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Geutebrück |
- cpe:2.3:o:geutebrueck:g-cam_efd-2250_firmware:*:*:*:*:*:*:*:* Versions up to 1.12.0.25 Vulnerable ·Geutebrück
- cpe:2.3:h:geutebrueck:g-cam_efd-2250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Geutebrück
- cpe:2.3:o:geutebrueck:g-cam_ethc-2230_firmware:*:*:*:*:*:*:*:* Versions up to 1.12.0.25 Vulnerable ·Geutebrück
- cpe:2.3:h:geutebrueck:g-cam_ethc-2230:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Geutebrück
- cpe:2.3:o:geutebrueck:g-cam_ethc-2240_firmware:*:*:*:*:*:*:*:* Versions up to 1.12.0.25 Vulnerable ·Geutebrück
- cpe:2.3:h:geutebrueck:g-cam_ethc-2240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Geutebrück
- cpe:2.3:o:geutebrueck:g-cam_ethc-2239_firmware:*:*:*:*:*:*:*:* Versions up to 1.12.0.25 Vulnerable ·Geutebrück
- cpe:2.3:h:geutebrueck:g-cam_ethc-2239:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Geutebrück
- cpe:2.3:o:geutebrueck:g-cam_ethc-2249_firmware:*:*:*:*:*:*:*:* Versions up to 1.12.0.25 Vulnerable ·Geutebrück
- cpe:2.3:h:geutebrueck:g-cam_ethc-2249:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Geutebrück
- cpe:2.3:o:geutebrueck:g-cam_ewpc-2270_firmware:*:*:*:*:*:*:*:* Versions up to 1.12.0.25 Vulnerable ·Geutebrück
- cpe:2.3:h:geutebrueck:g-cam_ewpc-2270:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Geutebrück
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-10957
- 2026-10-03 Alias added: GHSA-wfh9-fxc6-p4h7
References
More Geutebrück G-cam Ebc-2110 Firmware vulnerabilities
- TI-2021-12938 UDP Technology/Geutebrück camera devices: Authentication Bypass CVSS 3.1CRITICAL 9.8
- TI-2021-12939 UDP Technology/Geutebrück camera devices: command injection leading to RCE CVSS 3.1HIGH 7.2
- TI-2021-12944 UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE CVSS 3.1HIGH 7.2
- TI-2021-12949 UDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE CVSS 3.1HIGH 7.2
- TI-2021-12945 UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE CVSS 3.1HIGH 7.2
- TI-2021-12943 UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE CVSS 3.1HIGH 7.2
Sources
- CVE-2019-10957 · CVE Program
- CVE-2019-10957 · NVD
- FIRST EPSS
- GHSA-wfh9-fxc6-p4h7 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences