CVE-2021-33549
high · 7.2Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code.
7.2
CVSS
66.2%
EPSS (exploit prob.)
99th
EPSS percentile
2021-09-13
Published
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| geutebrueck | g-cam_ebc-2110_firmware | <= 1.12.0.27 |
| geutebrueck | g-cam_ebc-2110_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ebc-2110_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ebc-2110 | all versions |
| geutebrueck | g-cam_ebc-2111_firmware | <= 1.12.0.27 |
| geutebrueck | g-cam_ebc-2111_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ebc-2111_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ebc-2111 | all versions |
| geutebrueck | g-cam_efd-2241_firmware | <= 1.12.0.27 |
| geutebrueck | g-cam_efd-2241_firmware | 1.12.13.2 |
| geutebrueck | g-cam_efd-2241_firmware | 1.12.14.5 |
| geutebrueck | g-cam_efd-2241 | all versions |
| geutebrueck | g-cam_efd-2250_firmware | <= 1.12.0.27 |
| geutebrueck | g-cam_efd-2250_firmware | 1.12.13.2 |
| geutebrueck | g-cam_efd-2250_firmware | 1.12.14.5 |
| geutebrueck | g-cam_efd-2250 | all versions |
| geutebrueck | g-cam_ethc-2230_firmware | <= 1.12.0.27 |
| geutebrueck | g-cam_ethc-2230_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ethc-2230_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ethc-2230 | all versions |
| geutebrueck | g-cam_ethc-2239_firmware | <= 1.12.0.27 |
| geutebrueck | g-cam_ethc-2239_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ethc-2239_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ethc-2239 | all versions |
| geutebrueck | g-cam_ethc-2240_firmware | <= 1.12.0.27 |
| geutebrueck | g-cam_ethc-2240_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ethc-2240_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ethc-2240 | all versions |
| geutebrueck | g-cam_ethc-2249_firmware | <= 1.12.0.27 |
| geutebrueck | g-cam_ethc-2249_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ethc-2249_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ethc-2249 | all versions |
| geutebrueck | g-cam_ewpc-2270_firmware | <= 1.12.0.27 |
| geutebrueck | g-cam_ewpc-2270_firmware | 1.12.13.2 |
| geutebrueck | g-cam_ewpc-2270_firmware | 1.12.14.5 |
| geutebrueck | g-cam_ewpc-2270 | all versions |
| geutebrueck | g-code_eec-2400_firmware | <= 1.12.0.27 |
| geutebrueck | g-code_eec-2400_firmware | 1.12.13.2 |
| geutebrueck | g-code_eec-2400_firmware | 1.12.14.5 |
| geutebrueck | g-code_eec-2400 | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html
- https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/
- http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html
- https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2021-33549