Vulnerability Description
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Geutebrueck | G-Cam Ebc-2110 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ebc-2110 | All versions |
| Geutebrueck | G-Cam Ebc-2111 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ebc-2111 | All versions |
| Geutebrueck | G-Cam Efd-2241 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Efd-2241 | All versions |
| Geutebrueck | G-Cam Efd-2250 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Efd-2250 | All versions |
| Geutebrueck | G-Cam Ethc-2230 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ethc-2230 | All versions |
| Geutebrueck | G-Cam Ethc-2239 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ethc-2239 | All versions |
| Geutebrueck | G-Cam Ethc-2240 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ethc-2240 | All versions |
| Geutebrueck | G-Cam Ethc-2249 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ethc-2249 | All versions |
| Geutebrueck | G-Cam Ewpc-2270 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Cam Ewpc-2270 | All versions |
| Geutebrueck | G-Code Eec-2400 Firmware | <= 1.12.0.27 |
| Geutebrueck | G-Code Eec-2400 | All versions |
Related Weaknesses (CWE)
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03Third Party AdvisoryUS Government Resource
- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ExploitThird Party Advisory
- https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03Third Party AdvisoryUS Government Resource
- https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ExploitThird Party Advisory
FAQ
What is CVE-2021-33552?
CVE-2021-33552 is a vulnerability with a CVSS score of 7.2 (HIGH). Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
How severe is CVE-2021-33552?
CVE-2021-33552 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-33552?
Check the references section above for vendor advisories and patch information. Affected products include: Geutebrueck G-Cam Ebc-2110 Firmware, Geutebrueck G-Cam Ebc-2110, Geutebrueck G-Cam Ebc-2111 Firmware, Geutebrueck G-Cam Ebc-2111, Geutebrueck G-Cam Efd-2241 Firmware.