← All CVEs

CVE-2021-33549

high · 7.2

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code.

7.2
CVSS
66.2%
EPSS (exploit prob.)
99th
EPSS percentile
2021-09-13
Published

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-121

Affected products

VendorProductAffected versions
geutebrueckg-cam_ebc-2110_firmware<= 1.12.0.27
geutebrueckg-cam_ebc-2110_firmware1.12.13.2
geutebrueckg-cam_ebc-2110_firmware1.12.14.5
geutebrueckg-cam_ebc-2110all versions
geutebrueckg-cam_ebc-2111_firmware<= 1.12.0.27
geutebrueckg-cam_ebc-2111_firmware1.12.13.2
geutebrueckg-cam_ebc-2111_firmware1.12.14.5
geutebrueckg-cam_ebc-2111all versions
geutebrueckg-cam_efd-2241_firmware<= 1.12.0.27
geutebrueckg-cam_efd-2241_firmware1.12.13.2
geutebrueckg-cam_efd-2241_firmware1.12.14.5
geutebrueckg-cam_efd-2241all versions
geutebrueckg-cam_efd-2250_firmware<= 1.12.0.27
geutebrueckg-cam_efd-2250_firmware1.12.13.2
geutebrueckg-cam_efd-2250_firmware1.12.14.5
geutebrueckg-cam_efd-2250all versions
geutebrueckg-cam_ethc-2230_firmware<= 1.12.0.27
geutebrueckg-cam_ethc-2230_firmware1.12.13.2
geutebrueckg-cam_ethc-2230_firmware1.12.14.5
geutebrueckg-cam_ethc-2230all versions
geutebrueckg-cam_ethc-2239_firmware<= 1.12.0.27
geutebrueckg-cam_ethc-2239_firmware1.12.13.2
geutebrueckg-cam_ethc-2239_firmware1.12.14.5
geutebrueckg-cam_ethc-2239all versions
geutebrueckg-cam_ethc-2240_firmware<= 1.12.0.27
geutebrueckg-cam_ethc-2240_firmware1.12.13.2
geutebrueckg-cam_ethc-2240_firmware1.12.14.5
geutebrueckg-cam_ethc-2240all versions
geutebrueckg-cam_ethc-2249_firmware<= 1.12.0.27
geutebrueckg-cam_ethc-2249_firmware1.12.13.2
geutebrueckg-cam_ethc-2249_firmware1.12.14.5
geutebrueckg-cam_ethc-2249all versions
geutebrueckg-cam_ewpc-2270_firmware<= 1.12.0.27
geutebrueckg-cam_ewpc-2270_firmware1.12.13.2
geutebrueckg-cam_ewpc-2270_firmware1.12.14.5
geutebrueckg-cam_ewpc-2270all versions
geutebrueckg-code_eec-2400_firmware<= 1.12.0.27
geutebrueckg-code_eec-2400_firmware1.12.13.2
geutebrueckg-code_eec-2400_firmware1.12.14.5
geutebrueckg-code_eec-2400all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-33549