CVE-2017-5173

critical · 9.8

An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnerability has been identified. If special elements are not properly neutralized, an attacker can call multiple parameters that can allow access to the root level operating system which could allow remote code execution.

9.8

CVSS

29.6%

EPSS (exploit prob.)

98th

EPSS percentile

2017-05-19

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

Affected products

Vendor	Product	Affected versions
geutebrueck	ip_camera_g-cam_efd-2250_firmware	1.11.0.12
geutebrueck	ip_camera_g-cam_efd-2250	all versions

Check a specific version with /api/v1/cve/match.

References

http://www.securityfocus.com/bid/96209
https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02
https://www.exploit-db.com/exploits/41360/
http://www.securityfocus.com/bid/96209
https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02
https://www.exploit-db.com/exploits/41360/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-5173