Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner

Sources

Sort by

Order

Apply ordering (override relevance)

VAR-201812-0470

Vulnerability from variot - Updated: 2025-01-30 19:51

In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable to an OS system command injection as root. The Geutebr\303\274ck E2CameraSeries is an E2 series webcam from Geutebr\303\274ck, Germany. A remote attacker can exploit this vulnerability to inject operating system commands with root privileges. GeutebrÃ¼ck GmbH E2 Series IP Cameras are prone to an OS command-injection vulnerability

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201812-0470",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "g-cam\\/efd-2251",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "geutebrueck",
        "version": "1.12.0.25"
      },
      {
        "model": "g-cam\\/ewpc-2275",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "geutebrueck",
        "version": "1.12.0.25"
      },
      {
        "model": "g-cam/efd-2251",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "geutebrueck",
        "version": "1.12.0.25"
      },
      {
        "model": "g-cam/ewpc-2275",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "geutebrueck",
        "version": "1.12.0.25"
      },
      {
        "model": "e2 camera series",
        "scope": "lt",
        "trust": 0.6,
        "vendor": "geutebruck",
        "version": "1.12.0.25"
      },
      {
        "model": "e2 series camera",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "geutebr\u00fcck",
        "version": "1.12"
      },
      {
        "model": "e2 series camera",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "geutebr\u00fcck",
        "version": "1.12.0.25"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-04134"
      },
      {
        "db": "BID",
        "id": "106208"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014624"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-19007"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/o:geutebrueck:g-cam%2fefd-2251_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:geutebrueck:g-cam%2fewpc-2275_firmware",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014624"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The vendor reported this issue.",
    "sources": [
      {
        "db": "BID",
        "id": "106208"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2018-19007",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2018-19007",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.9,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "MULTIPLE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 8.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 6.4,
            "id": "CNVD-2019-04134",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:M/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2018-19007",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.8,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2018-19007",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "NVD",
            "id": "CVE-2018-19007",
            "trust": 0.8,
            "value": "Critical"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2019-04134",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201812-657",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "VULMON",
            "id": "CVE-2018-19007",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-04134"
      },
      {
        "db": "VULMON",
        "id": "CVE-2018-19007"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014624"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201812-657"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-19007"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable to an OS system command injection as root. The Geutebr\\303\\274ck E2CameraSeries is an E2 series webcam from Geutebr\\303\\274ck, Germany. A remote attacker can exploit this vulnerability to inject operating system commands with root privileges. Geutebr\u00c3\u00bcck GmbH E2 Series IP Cameras are prone to an OS command-injection vulnerability",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2018-19007"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014624"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-04134"
      },
      {
        "db": "BID",
        "id": "106208"
      },
      {
        "db": "VULMON",
        "id": "CVE-2018-19007"
      }
    ],
    "trust": 2.52
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2018-19007",
        "trust": 3.5
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-18-347-03",
        "trust": 2.8
      },
      {
        "db": "BID",
        "id": "106208",
        "trust": 2.6
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014624",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-04134",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201812-657",
        "trust": 0.6
      },
      {
        "db": "OTHER",
        "id": "NONE",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2018-19007",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "OTHER",
        "id": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-04134"
      },
      {
        "db": "VULMON",
        "id": "CVE-2018-19007"
      },
      {
        "db": "BID",
        "id": "106208"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014624"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201812-657"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-19007"
      }
    ]
  },
  "id": "VAR-201812-0470",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "OTHER",
        "id": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-04134"
      }
    ],
    "trust": 1.7
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      },
      {
        "category": [
          "camera device"
        ],
        "sub_category": "camera",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "OTHER",
        "id": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-04134"
      }
    ]
  },
  "last_update_date": "2025-01-30T19:51:02.593000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Top Page",
        "trust": 0.8,
        "url": "https://www.guardzilla.com/"
      },
      {
        "title": "Geutebr\\303\\274ckE2CameraSeries operating system command injection vulnerability patch",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/153491"
      },
      {
        "title": "Geutebr\u00fcck E2 Camera Series Fixes for operating system command injection vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=87899"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2019-04134"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014624"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201812-657"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-78",
        "trust": 1.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014624"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-19007"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.9,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-18-347-03"
      },
      {
        "trust": 2.4,
        "url": "http://www.securityfocus.com/bid/106208"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-19007"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-19007"
      },
      {
        "trust": 0.3,
        "url": "https://www.geutebrueck.com/"
      },
      {
        "trust": 0.1,
        "url": "https://ieeexplore.ieee.org/abstract/document/10769424"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/78.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "OTHER",
        "id": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-04134"
      },
      {
        "db": "VULMON",
        "id": "CVE-2018-19007"
      },
      {
        "db": "BID",
        "id": "106208"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014624"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201812-657"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-19007"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "OTHER",
        "id": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-04134"
      },
      {
        "db": "VULMON",
        "id": "CVE-2018-19007"
      },
      {
        "db": "BID",
        "id": "106208"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014624"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201812-657"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-19007"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-02-14T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-04134"
      },
      {
        "date": "2018-12-14T00:00:00",
        "db": "VULMON",
        "id": "CVE-2018-19007"
      },
      {
        "date": "2018-12-14T00:00:00",
        "db": "BID",
        "id": "106208"
      },
      {
        "date": "2019-03-29T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2018-014624"
      },
      {
        "date": "2018-12-14T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201812-657"
      },
      {
        "date": "2018-12-14T20:29:00.297000",
        "db": "NVD",
        "id": "CVE-2018-19007"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-02-14T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-04134"
      },
      {
        "date": "2019-10-09T00:00:00",
        "db": "VULMON",
        "id": "CVE-2018-19007"
      },
      {
        "date": "2018-12-14T00:00:00",
        "db": "BID",
        "id": "106208"
      },
      {
        "date": "2019-03-29T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2018-014624"
      },
      {
        "date": "2019-10-17T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201812-657"
      },
      {
        "date": "2024-11-21T03:57:09.213000",
        "db": "NVD",
        "id": "CVE-2018-19007"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201812-657"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Geutebrueck GmbH E2 Camera In the series  OS Command injection vulnerability",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-014624"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "operating system commend injection",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201812-657"
      }
    ],
    "trust": 0.6
  }
}

CVE-2021-33554 (GCVE-0-2021-33554)

Vulnerability from nvd – Published: 2021-09-13 17:55 – Updated: 2024-09-17 03:08

Title

UDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.146Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Command injection in appfile.filename parameter leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33554",
    "datePublished": "2021-09-13T17:55:49.767Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T03:08:06.366Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33553 (GCVE-0-2021-33553)

Vulnerability from nvd – Published: 2021-09-13 17:55 – Updated: 2024-09-16 20:17

Title

UDP Technology/Geutebrück camera devices: Command injection in command parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.195Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Command injection in command parameter leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33553",
    "datePublished": "2021-09-13T17:55:48.174Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-16T20:17:28.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33552 (GCVE-0-2021-33552)

Vulnerability from nvd – Published: 2021-09-13 17:55 – Updated: 2024-09-17 01:50

Title

UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.068Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Command injection in date parameter leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33552",
    "datePublished": "2021-09-13T17:55:46.549Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:50:35.510Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33551 (GCVE-0-2021-33551)

Vulnerability from nvd – Published: 2021-09-13 17:55 – Updated: 2024-09-16 18:13

Title

UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.179Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Command injection in environment.lang parameter leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33551",
    "datePublished": "2021-09-13T17:55:44.932Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-16T18:13:40.228Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33550 (GCVE-0-2021-33550)

Vulnerability from nvd – Published: 2021-09-13 17:55 – Updated: 2024-09-17 01:11

Title

UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:42.973Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Command injection in date parameter leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33550",
    "datePublished": "2021-09-13T17:55:43.372Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:11:15.395Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33549 (GCVE-0-2021-33549)

Vulnerability from nvd – Published: 2021-09-13 17:55 – Updated: 2024-09-17 00:00

Title

UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

CERTVDE

References

3 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…	x_refsource_CONFIRM
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03	x_refsource_CONFIRM
http://packetstormsecurity.com/files/164191/Geute…	x_refsource_MISC

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.115Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121 Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-09-17T21:06:48.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in action parameter leading to RCE",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2021-08-31T22:00:01.000Z",
          "ID": "CVE-2021-33549",
          "STATE": "PUBLIC",
          "TITLE": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in action parameter leading to RCE"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "E2 Series",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Encoder G-Code",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Geutebr\u00fcck"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-121 Stack-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/",
              "refsource": "CONFIRM",
              "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
            },
            {
              "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03",
              "refsource": "CONFIRM",
              "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
            },
            {
              "name": "http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33549",
    "datePublished": "2021-09-13T17:55:41.804Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T00:00:56.974Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33548 (GCVE-0-2021-33548)

Vulnerability from nvd – Published: 2021-09-13 17:55 – Updated: 2024-09-16 19:41

Title

UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:42.995Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Command injection in preserve parameter leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33548",
    "datePublished": "2021-09-13T17:55:40.187Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-16T19:41:35.920Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33547 (GCVE-0-2021-33547)

Vulnerability from nvd – Published: 2021-09-13 17:55 – Updated: 2024-09-17 02:47

Title

UDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…	x_refsource_CONFIRM
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03	x_refsource_CONFIRM

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:42.961Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121 Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-09-13T17:55:38.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in profile parameter leading to RCE",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2021-08-31T22:00:00.000Z",
          "ID": "CVE-2021-33547",
          "STATE": "PUBLIC",
          "TITLE": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in profile parameter leading to RCE"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "E2 Series",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Encoder G-Code",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Geutebr\u00fcck"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-121 Stack-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/",
              "refsource": "CONFIRM",
              "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
            },
            {
              "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03",
              "refsource": "CONFIRM",
              "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33547",
    "datePublished": "2021-09-13T17:55:38.601Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T02:47:47.519Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33546 (GCVE-0-2021-33546)

Vulnerability from nvd – Published: 2021-09-13 17:55 – Updated: 2024-09-17 04:24

Title

UDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…	x_refsource_CONFIRM
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03	x_refsource_CONFIRM

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.091Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121 Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-09-13T17:55:36.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in name parameter leading to RCE",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2021-08-31T22:00:00.000Z",
          "ID": "CVE-2021-33546",
          "STATE": "PUBLIC",
          "TITLE": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in name parameter leading to RCE"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "E2 Series",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Encoder G-Code",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Geutebr\u00fcck"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-121 Stack-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/",
              "refsource": "CONFIRM",
              "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
            },
            {
              "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03",
              "refsource": "CONFIRM",
              "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33546",
    "datePublished": "2021-09-13T17:55:36.920Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T04:24:10.084Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33545 (GCVE-0-2021-33545)

Vulnerability from nvd – Published: 2021-09-13 17:55 – Updated: 2024-09-17 01:55

Title

UDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…	x_refsource_CONFIRM
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03	x_refsource_CONFIRM

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:42.986Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121 Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-09-13T17:55:35.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in counter parameter leading to RCE",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2021-08-31T22:00:00.000Z",
          "ID": "CVE-2021-33545",
          "STATE": "PUBLIC",
          "TITLE": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in counter parameter leading to RCE"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "E2 Series",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Encoder G-Code",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Geutebr\u00fcck"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-121 Stack-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/",
              "refsource": "CONFIRM",
              "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
            },
            {
              "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03",
              "refsource": "CONFIRM",
              "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33545",
    "datePublished": "2021-09-13T17:55:35.310Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:55:45.866Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33544 (GCVE-0-2021-33544)

Vulnerability from nvd – Published: 2021-09-13 17:55 – Updated: 2024-09-16 17:03

Shadowserver KEVIntel

Title

UDP Technology/Geutebrück camera devices: command injection leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.190Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: command injection leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33544",
    "datePublished": "2021-09-13T17:55:33.770Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-16T17:03:56.732Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33543 (GCVE-0-2021-33543)

Vulnerability from nvd – Published: 2021-09-13 17:55 – Updated: 2024-08-03 23:50

Title

UDP Technology/Geutebrück camera devices: Authentication Bypass

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-306 - Missing Authentication for Critical Function

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…	x_refsource_CONFIRM
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03	x_refsource_CONFIRM

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.139Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306 Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-28T14:30:17.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Authentication Bypass",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "ID": "CVE-2021-33543",
          "STATE": "PUBLIC",
          "TITLE": "UDP Technology/Geutebr\u00fcck camera devices: Authentication Bypass"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "E2 Series",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Encoder G-Code",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Geutebr\u00fcck"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-306 Missing Authentication for Critical Function"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/",
              "refsource": "CONFIRM",
              "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
            },
            {
              "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03",
              "refsource": "CONFIRM",
              "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33543",
    "datePublished": "2021-09-13T17:55:32.000Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-08-03T23:50:43.139Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33554 (GCVE-0-2021-33554)

Vulnerability from cvelistv5 – Published: 2021-09-13 17:55 – Updated: 2024-09-17 03:08

Title

UDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.146Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Command injection in appfile.filename parameter leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33554",
    "datePublished": "2021-09-13T17:55:49.767Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T03:08:06.366Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33553 (GCVE-0-2021-33553)

Vulnerability from cvelistv5 – Published: 2021-09-13 17:55 – Updated: 2024-09-16 20:17

Title

UDP Technology/Geutebrück camera devices: Command injection in command parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.195Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Command injection in command parameter leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33553",
    "datePublished": "2021-09-13T17:55:48.174Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-16T20:17:28.205Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33552 (GCVE-0-2021-33552)

Vulnerability from cvelistv5 – Published: 2021-09-13 17:55 – Updated: 2024-09-17 01:50

Title

UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.068Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Command injection in date parameter leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33552",
    "datePublished": "2021-09-13T17:55:46.549Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:50:35.510Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33551 (GCVE-0-2021-33551)

Vulnerability from cvelistv5 – Published: 2021-09-13 17:55 – Updated: 2024-09-16 18:13

Title

UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.179Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Command injection in environment.lang parameter leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33551",
    "datePublished": "2021-09-13T17:55:44.932Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-16T18:13:40.228Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33550 (GCVE-0-2021-33550)

Vulnerability from cvelistv5 – Published: 2021-09-13 17:55 – Updated: 2024-09-17 01:11

Title

UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:42.973Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Command injection in date parameter leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33550",
    "datePublished": "2021-09-13T17:55:43.372Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:11:15.395Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33549 (GCVE-0-2021-33549)

Vulnerability from cvelistv5 – Published: 2021-09-13 17:55 – Updated: 2024-09-17 00:00

Title

UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

CERTVDE

References

3 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…	x_refsource_CONFIRM
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03	x_refsource_CONFIRM
http://packetstormsecurity.com/files/164191/Geute…	x_refsource_MISC

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.115Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121 Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-09-17T21:06:48.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in action parameter leading to RCE",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2021-08-31T22:00:01.000Z",
          "ID": "CVE-2021-33549",
          "STATE": "PUBLIC",
          "TITLE": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in action parameter leading to RCE"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "E2 Series",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Encoder G-Code",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Geutebr\u00fcck"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-121 Stack-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/",
              "refsource": "CONFIRM",
              "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
            },
            {
              "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03",
              "refsource": "CONFIRM",
              "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
            },
            {
              "name": "http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33549",
    "datePublished": "2021-09-13T17:55:41.804Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T00:00:56.974Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33548 (GCVE-0-2021-33548)

Vulnerability from cvelistv5 – Published: 2021-09-13 17:55 – Updated: 2024-09-16 19:41

Title

UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:42.995Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Command injection in preserve parameter leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33548",
    "datePublished": "2021-09-13T17:55:40.187Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-16T19:41:35.920Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33547 (GCVE-0-2021-33547)

Vulnerability from cvelistv5 – Published: 2021-09-13 17:55 – Updated: 2024-09-17 02:47

Title

UDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…	x_refsource_CONFIRM
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03	x_refsource_CONFIRM

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:42.961Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121 Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-09-13T17:55:38.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in profile parameter leading to RCE",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2021-08-31T22:00:00.000Z",
          "ID": "CVE-2021-33547",
          "STATE": "PUBLIC",
          "TITLE": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in profile parameter leading to RCE"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "E2 Series",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Encoder G-Code",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Geutebr\u00fcck"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-121 Stack-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/",
              "refsource": "CONFIRM",
              "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
            },
            {
              "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03",
              "refsource": "CONFIRM",
              "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33547",
    "datePublished": "2021-09-13T17:55:38.601Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T02:47:47.519Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33546 (GCVE-0-2021-33546)

Vulnerability from cvelistv5 – Published: 2021-09-13 17:55 – Updated: 2024-09-17 04:24

Title

UDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…	x_refsource_CONFIRM
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03	x_refsource_CONFIRM

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.091Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121 Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-09-13T17:55:36.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in name parameter leading to RCE",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2021-08-31T22:00:00.000Z",
          "ID": "CVE-2021-33546",
          "STATE": "PUBLIC",
          "TITLE": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in name parameter leading to RCE"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "E2 Series",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Encoder G-Code",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Geutebr\u00fcck"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-121 Stack-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/",
              "refsource": "CONFIRM",
              "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
            },
            {
              "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03",
              "refsource": "CONFIRM",
              "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33546",
    "datePublished": "2021-09-13T17:55:36.920Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T04:24:10.084Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33545 (GCVE-0-2021-33545)

Vulnerability from cvelistv5 – Published: 2021-09-13 17:55 – Updated: 2024-09-17 01:55

Title

UDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…	x_refsource_CONFIRM
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03	x_refsource_CONFIRM

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:42.986Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121 Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-09-13T17:55:35.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in counter parameter leading to RCE",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2021-08-31T22:00:00.000Z",
          "ID": "CVE-2021-33545",
          "STATE": "PUBLIC",
          "TITLE": "UDP Technology/Geutebr\u00fcck camera devices: Buffer overflow in counter parameter leading to RCE"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "E2 Series",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Encoder G-Code",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Geutebr\u00fcck"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-121 Stack-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/",
              "refsource": "CONFIRM",
              "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
            },
            {
              "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03",
              "refsource": "CONFIRM",
              "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33545",
    "datePublished": "2021-09-13T17:55:35.310Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:55:45.866Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33544 (GCVE-0-2021-33544)

Vulnerability from cvelistv5 – Published: 2021-09-13 17:55 – Updated: 2024-09-16 17:03

Shadowserver KEVIntel

Title

UDP Technology/Geutebrück camera devices: command injection leading to RCE

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Date Public

2021-08-31 00:00

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.190Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "datePublic": "2021-08-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-11-02T00:00:00.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: command injection leading to RCE",
      "x_generator": {
        "engine": "vulnogram 0.1.0-rc1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33544",
    "datePublished": "2021-09-13T17:55:33.770Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-09-16T17:03:56.732Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-33543 (GCVE-0-2021-33543)

Vulnerability from cvelistv5 – Published: 2021-09-13 17:55 – Updated: 2024-08-03 23:50

Title

UDP Technology/Geutebrück camera devices: Authentication Bypass

Summary

Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-306 - Missing Authentication for Critical Function

Assigner

CERTVDE

References

2 references

URL	Tags
https://www.randorisec.fr/fr/udp-technology-ip-ca…	x_refsource_CONFIRM
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03	x_refsource_CONFIRM

Impacted products

2 products

Vendor	Product	Version
Geutebrück	E2 Series	Affected: EBC-21xx 1.12.13.2 Affected: EBC-21xx 1.12.14.5 Affected: EFD-22xx 1.12.13.2 Affected: EFD-22xx 1.12.14.5 Affected: ETHC-22xx 1.12.13.2 Affected: ETHC-22xx 1.12.14.5 Affected: EWPC-22xx 1.12.13.2 Affected: EWPC-22xx 1.12.14.5 Affected: EBC-21xx , ≤ 1.12.0.27 (custom) Affected: EFD-22xx , ≤ 1.12.0.27 (custom) Affected: ETHC-22xx , ≤ 1.12.0.27 (custom) Affected: EWPC-22xx , ≤ 1.12.0.27 (custom)
Geutebrück	Encoder G-Code	Affected: EEC-2xx 1.12.13.2 Affected: EEC-2xx 1.12.14.5 Affected: EEN-20xx 1.12.13.2 Affected: EEN-20xx 1.12.14.5 Affected: EEC-2xx , ≤ 1.12.0.27 (custom) Affected: EEN-20xx , ≤ 1.12.0.27 (custom)

Credits

Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:50:43.139Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "E2 Series",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EBC-21xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EFD-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "ETHC-22xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EWPC-22xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EBC-21xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EFD-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "ETHC-22xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EWPC-22xx",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Encoder G-Code",
          "vendor": "Geutebr\u00fcck",
          "versions": [
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEC-2xx 1.12.14.5"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.13.2"
            },
            {
              "status": "affected",
              "version": "EEN-20xx 1.12.14.5"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEC-2xx",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.12.0.27",
              "status": "affected",
              "version": "EEN-20xx",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306 Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-28T14:30:17.000Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "UDP Technology/Geutebr\u00fcck camera devices: Authentication Bypass",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "ID": "CVE-2021-33543",
          "STATE": "PUBLIC",
          "TITLE": "UDP Technology/Geutebr\u00fcck camera devices: Authentication Bypass"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "E2 Series",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EBC-21xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EFD-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "ETHC-22xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EWPC-22xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Encoder G-Code",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEC-2xx",
                            "version_value": "1.12.14.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.0.27"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.13.2"
                          },
                          {
                            "version_affected": "=",
                            "version_name": "EEN-20xx",
                            "version_value": "1.12.14.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Geutebr\u00fcck"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple camera devices by UDP Technology, Geutebr\u00fcck and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-306 Missing Authentication for Critical Function"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/",
              "refsource": "CONFIRM",
              "url": "https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/"
            },
            {
              "name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03",
              "refsource": "CONFIRM",
              "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-33543",
    "datePublished": "2021-09-13T17:55:32.000Z",
    "dateReserved": "2021-05-24T00:00:00.000Z",
    "dateUpdated": "2024-08-03T23:50:43.139Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Find a vulnerability

Search criteria

25 vulnerabilities by Geutebrück

VAR-201812-0470

CVE-2021-33554 (GCVE-0-2021-33554)

CVE-2021-33553 (GCVE-0-2021-33553)

CVE-2021-33552 (GCVE-0-2021-33552)

CVE-2021-33551 (GCVE-0-2021-33551)

CVE-2021-33550 (GCVE-0-2021-33550)

CVE-2021-33549 (GCVE-0-2021-33549)

CVE-2021-33548 (GCVE-0-2021-33548)

CVE-2021-33547 (GCVE-0-2021-33547)

CVE-2021-33546 (GCVE-0-2021-33546)

CVE-2021-33545 (GCVE-0-2021-33545)

CVE-2021-33544 (GCVE-0-2021-33544)

CVE-2021-33543 (GCVE-0-2021-33543)

CVE-2021-33554 (GCVE-0-2021-33554)

CVE-2021-33553 (GCVE-0-2021-33553)

CVE-2021-33552 (GCVE-0-2021-33552)

CVE-2021-33551 (GCVE-0-2021-33551)

CVE-2021-33550 (GCVE-0-2021-33550)

CVE-2021-33549 (GCVE-0-2021-33549)

CVE-2021-33548 (GCVE-0-2021-33548)

CVE-2021-33547 (GCVE-0-2021-33547)

CVE-2021-33546 (GCVE-0-2021-33546)

CVE-2021-33545 (GCVE-0-2021-33545)

CVE-2021-33544 (GCVE-0-2021-33544)

CVE-2021-33543 (GCVE-0-2021-33543)