Vulnerability Description
Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Geutebrueck | G-Cam Ebc-2110 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ebc-2110 | All versions |
| Geutebrueck | G-Cam Ebc-2111 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ebc-2111 | All versions |
| Geutebrueck | G-Cam Efd-2241 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Efd-2241 | All versions |
| Geutebrueck | G-Cam Efd-2250 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Efd-2250 | All versions |
| Geutebrueck | G-Cam Ethc-2230 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ethc-2230 | All versions |
| Geutebrueck | G-Cam Ethc-2239 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ethc-2239 | All versions |
| Geutebrueck | G-Cam Ethc-2240 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ethc-2240 | All versions |
| Geutebrueck | G-Cam Ethc-2249 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ethc-2249 | All versions |
| Geutebrueck | G-Cam Ewpc-2270 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ewpc-2270 | All versions |
| Geutebrueck | G-Code Eec-2400 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Code Eec-2400 | All versions |
Related Weaknesses (CWE)
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03Third Party AdvisoryUS Government Resource
- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ExploitThird Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03Third Party AdvisoryUS Government Resource
- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ExploitThird Party Advisory
FAQ
What is CVE-2021-33543?
CVE-2021-33543 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulatio...
How severe is CVE-2021-33543?
CVE-2021-33543 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-33543?
Check the references section above for vendor advisories and patch information. Affected products include: Geutebrueck G-Cam Ebc-2110 Firmware, Geutebrueck G-Cam Ebc-2110, Geutebrueck G-Cam Ebc-2111 Firmware, Geutebrueck G-Cam Ebc-2111, Geutebrueck G-Cam Efd-2241 Firmware.