CVE-2020-16205
high · 7.2Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5).
7.2
CVSS
61.1%
EPSS (exploit prob.)
99th
EPSS percentile
2020-08-14
Published
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| geutebrueck | g-cam_ebc-2110_firmware | 1.12.0.25 |
| geutebrueck | g-cam_ebc-2110_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ebc-2110_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ebc-2111_firmware | 1.12.0.25 |
| geutebrueck | g-cam_ebc-2111_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ebc-2111_firmware | 1.12.14.5 |
| geutebrueck | g-cam_efd-2240_firmware | 1.12.0.25 |
| geutebrueck | g-cam_efd-2240_firmware | 1.12.13.2 |
| geutebrueck | g-cam_efd-2240_firmware | 1.12.14.5 |
| geutebrueck | g-cam_efd-2241_firmware | 1.12.0.25 |
| geutebrueck | g-cam_efd-2241_firmware | 1.12.13.2 |
| geutebrueck | g-cam_efd-2241_firmware | 1.12.14.5 |
| geutebrueck | g-cam_efd-2250_firmware | 1.12.0.25 |
| geutebrueck | g-cam_efd-2250_firmware | 1.12.13.2 |
| geutebrueck | g-cam_efd-2250_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ethc-2230_firmware | 1.12.0.25 |
| geutebrueck | g-cam_ethc-2230_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ethc-2230_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ethc-2239_firmware | 1.12.0.25 |
| geutebrueck | g-cam_ethc-2239_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ethc-2239_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ethc-2240_firmware | 1.12.0.25 |
| geutebrueck | g-cam_ethc-2240_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ethc-2240_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ethc-2249_firmware | 1.12.0.25 |
| geutebrueck | g-cam_ethc-2249_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ethc-2249_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ewpc-2270_firmware | 1.12.0.25 |
| geutebrueck | g-cam_ewpc-2270_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ewpc-2270_firmware | 1.12.14.5 |
| geutebrueck | g-code_eec-2400_firmware | 1.12.0.25 |
| geutebrueck | g-code_eec-2400_firmware | 1.12.13.2 |
| geutebrueck | g-code_eec-2400_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ebc-2110 | all versions |
| geutebrueck | g-cam_ebc-2111 | all versions |
| geutebrueck | g-cam_efd-2240 | all versions |
| geutebrueck | g-cam_efd-2241 | all versions |
| geutebrueck | g-cam_efd-2250 | all versions |
| geutebrueck | g-cam_ethc-2230 | all versions |
| geutebrueck | g-cam_ethc-2239 | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-Command-Execution.html
- https://us-cert.cisa.gov/ics/advisories/icsa-20-219-03
- http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-Command-Execution.html
- https://us-cert.cisa.gov/ics/advisories/icsa-20-219-03
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2020-16205