Vulnerability Description
Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5).
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Geutebrueck | G-Cam Ebc-2110 Firmware | 1.12.0.25 |
| Geutebrueck | G-Cam Ebc-2111 Firmware | 1.12.0.25 |
| Geutebrueck | G-Cam Efd-2240 Firmware | 1.12.0.25 |
| Geutebrueck | G-Cam Efd-2241 Firmware | 1.12.0.25 |
| Geutebrueck | G-Cam Efd-2250 Firmware | 1.12.0.25 |
| Geutebrueck | G-Cam Ethc-2230 Firmware | 1.12.0.25 |
| Geutebrueck | G-Cam Ethc-2239 Firmware | 1.12.0.25 |
| Geutebrueck | G-Cam Ethc-2240 Firmware | 1.12.0.25 |
| Geutebrueck | G-Cam Ethc-2249 Firmware | 1.12.0.25 |
| Geutebrueck | G-Cam Ewpc-2270 Firmware | 1.12.0.25 |
| Geutebrueck | G-Code Eec-2400 Firmware | 1.12.0.25 |
| Geutebrueck | G-Cam Ebc-2110 | - |
| Geutebrueck | G-Cam Ebc-2111 | - |
| Geutebrueck | G-Cam Efd-2240 | - |
| Geutebrueck | G-Cam Efd-2241 | - |
| Geutebrueck | G-Cam Efd-2250 | - |
| Geutebrueck | G-Cam Ethc-2230 | - |
| Geutebrueck | G-Cam Ethc-2239 | - |
| Geutebrueck | G-Cam Ethc-2240 | - |
| Geutebrueck | G-Cam Ethc-2249 | - |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-ComExploitThird Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-20-219-03Third Party AdvisoryUS Government Resource
- http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-ComExploitThird Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-20-219-03Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2020-16205?
CVE-2020-16205 is a vulnerability with a CVSS score of 7.2 (HIGH). Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2...
How severe is CVE-2020-16205?
CVE-2020-16205 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-16205?
Check the references section above for vendor advisories and patch information. Affected products include: Geutebrueck G-Cam Ebc-2110 Firmware, Geutebrueck G-Cam Ebc-2111 Firmware, Geutebrueck G-Cam Efd-2240 Firmware, Geutebrueck G-Cam Efd-2241 Firmware, Geutebrueck G-Cam Efd-2250 Firmware.