Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

16 records

Priority HIGH 68

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.67312 Published 2021-09-13 No fix listed CWE-121
Priority LOW 37

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0282 Published 2021-09-13 No fix listed CWE-121
Priority LOW 37

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0282 Published 2021-09-13 No fix listed CWE-121
Priority LOW 37

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0282 Published 2021-09-13 No fix listed CWE-121
Priority HIGH 76

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.95767 Published 2021-09-13 No fix listed CWE-78
Priority HIGH 82

Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.81342 Published 2021-09-13 No fix listed CWE-306
TI-2020-12734 CVE-2020-16205 · GHSA-rmpj-q623-hh55

OS command injection in G-Cam and G-Code

Priority HIGH 66

Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.61092 Published 2020-08-14 No fix listed CWE-78
Priority LOW 37

Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to network configuration to supply system comma…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03272 Published 2020-01-17 No fix listed CWE-78
Priority LOW 24

Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00935 Published 2020-01-17 No fix listed CWE-79
Priority LOW 37

Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02707 Published 2020-01-17 No fix listed CWE-78