Vulnerability Description
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Geutebrueck | G-Cam Ebc-2110 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ebc-2110 | All versions |
| Geutebrueck | G-Cam Ebc-2111 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ebc-2111 | All versions |
| Geutebrueck | G-Cam Efd-2241 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Efd-2241 | All versions |
| Geutebrueck | G-Cam Efd-2250 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Efd-2250 | All versions |
| Geutebrueck | G-Cam Ethc-2230 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ethc-2230 | All versions |
| Geutebrueck | G-Cam Ethc-2239 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ethc-2239 | All versions |
| Geutebrueck | G-Cam Ethc-2240 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ethc-2240 | All versions |
| Geutebrueck | G-Cam Ethc-2249 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ethc-2249 | All versions |
| Geutebrueck | G-Cam Ewpc-2270 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ewpc-2270 | All versions |
| Geutebrueck | G-Code Eec-2400 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Code Eec-2400 | All versions |
Related Weaknesses (CWE)
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03Third Party AdvisoryUS Government Resource
- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ExploitThird Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03Third Party AdvisoryUS Government Resource
- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ExploitThird Party Advisory
FAQ
What is CVE-2021-33546?
CVE-2021-33546 is a vulnerability with a CVSS score of 7.2 (HIGH). Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute...
How severe is CVE-2021-33546?
CVE-2021-33546 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-33546?
Check the references section above for vendor advisories and patch information. Affected products include: Geutebrueck G-Cam Ebc-2110 Firmware, Geutebrueck G-Cam Ebc-2110, Geutebrueck G-Cam Ebc-2111 Firmware, Geutebrueck G-Cam Ebc-2111, Geutebrueck G-Cam Efd-2241 Firmware.