CVE-2021-33547

Multiple camera devices by UDP Technology, Geutebrck and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CERTVDECNA
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
VendorProductVersion
geutebrueckg-cam_ebc-2110_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-cam_ebc-2110_firmware
1.12.13.2
geutebrueckg-cam_ebc-2110_firmware
1.12.14.5
geutebrueckg-cam_ebc-2111_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-cam_ebc-2111_firmware
1.12.13.2
geutebrueckg-cam_ebc-2111_firmware
1.12.14.5
geutebrueckg-cam_efd-2241_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-cam_efd-2241_firmware
1.12.13.2
geutebrueckg-cam_efd-2241_firmware
1.12.14.5
geutebrueckg-cam_efd-2250_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-cam_efd-2250_firmware
1.12.13.2
geutebrueckg-cam_efd-2250_firmware
1.12.14.5
geutebrueckg-cam_ethc-2230_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-cam_ethc-2230_firmware
1.12.13.2
geutebrueckg-cam_ethc-2230_firmware
1.12.14.5
geutebrueckg-cam_ethc-2239_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-cam_ethc-2239_firmware
1.12.13.2
geutebrueckg-cam_ethc-2239_firmware
1.12.14.5
geutebrueckg-cam_ethc-2240_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-cam_ethc-2240_firmware
1.12.13.2
geutebrueckg-cam_ethc-2240_firmware
1.12.14.5
geutebrueckg-cam_ethc-2249_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-cam_ethc-2249_firmware
1.12.13.2
geutebrueckg-cam_ethc-2249_firmware
1.12.14.5
geutebrueckg-cam_ewpc-2270_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-cam_ewpc-2270_firmware
1.12.13.2
geutebrueckg-cam_ewpc-2270_firmware
1.12.14.5
geutebrueckg-code_eec-2400_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-code_eec-2400_firmware
1.12.13.2
geutebrueckg-code_eec-2400_firmware
1.12.14.5
geutebrueckg-code_een-2010_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-code_een-2010_firmware
1.12.13.2
geutebrueckg-code_een-2010_firmware
1.12.14.5
geutebrueckg-code_een-2040_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-code_een-2040_firmware
1.12.13.2
geutebrueckg-code_een-2040_firmware
1.12.14.5
geutebrueckg-cam_ebc-2112_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-cam_ebc-2112_firmware
1.12.13.2
geutebrueckg-cam_ebc-2112_firmware
1.12.14.5
geutebrueckg-cam_efd-2251_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-cam_efd-2251_firmware
1.12.13.2
geutebrueckg-cam_efd-2251_firmware
1.12.14.5
geutebrueckg-cam_ewpc-2275_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-cam_ewpc-2275_firmware
1.12.13.2
geutebrueckg-cam_ewpc-2275_firmware
1.12.14.5
geutebrueckg-cam_ewpc-2271_firmware
𝑥
≤ 1.12.0.27
geutebrueckg-cam_ewpc-2271_firmware
1.12.13.2
geutebrueckg-cam_ewpc-2271_firmware
1.12.14.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/
https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/