CVE-2021-33551 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.2 HIGH	NETWORK	LOW	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Affected Products (NVD)

Vendor	Product	Version
geutebrueck	g-cam_ebc-2110_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-cam_ebc-2110_firmware	1.12.13.2
geutebrueck	g-cam_ebc-2110_firmware	1.12.14.5
geutebrueck	g-cam_ebc-2111_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-cam_ebc-2111_firmware	1.12.13.2
geutebrueck	g-cam_ebc-2111_firmware	1.12.14.5
geutebrueck	g-cam_efd-2241_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-cam_efd-2241_firmware	1.12.13.2
geutebrueck	g-cam_efd-2241_firmware	1.12.14.5
geutebrueck	g-cam_efd-2250_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-cam_efd-2250_firmware	1.12.13.2
geutebrueck	g-cam_efd-2250_firmware	1.12.14.5
geutebrueck	g-cam_ethc-2230_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-cam_ethc-2230_firmware	1.12.13.2
geutebrueck	g-cam_ethc-2230_firmware	1.12.14.5
geutebrueck	g-cam_ethc-2239_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-cam_ethc-2239_firmware	1.12.13.2
geutebrueck	g-cam_ethc-2239_firmware	1.12.14.5
geutebrueck	g-cam_ethc-2240_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-cam_ethc-2240_firmware	1.12.13.2
geutebrueck	g-cam_ethc-2240_firmware	1.12.14.5
geutebrueck	g-cam_ethc-2249_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-cam_ethc-2249_firmware	1.12.13.2
geutebrueck	g-cam_ethc-2249_firmware	1.12.14.5
geutebrueck	g-cam_ewpc-2270_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-cam_ewpc-2270_firmware	1.12.13.2
geutebrueck	g-cam_ewpc-2270_firmware	1.12.14.5
geutebrueck	g-code_eec-2400_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-code_eec-2400_firmware	1.12.13.2
geutebrueck	g-code_eec-2400_firmware	1.12.14.5
geutebrueck	g-code_een-2010_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-code_een-2010_firmware	1.12.13.2
geutebrueck	g-code_een-2010_firmware	1.12.14.5
geutebrueck	g-code_een-2040_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-code_een-2040_firmware	1.12.13.2
geutebrueck	g-code_een-2040_firmware	1.12.14.5
geutebrueck	g-cam_ebc-2112_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-cam_ebc-2112_firmware	1.12.13.2
geutebrueck	g-cam_ebc-2112_firmware	1.12.14.5
geutebrueck	g-cam_efd-2251_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-cam_efd-2251_firmware	1.12.13.2
geutebrueck	g-cam_efd-2251_firmware	1.12.14.5
geutebrueck	g-cam_ewpc-2275_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-cam_ewpc-2275_firmware	1.12.13.2
geutebrueck	g-cam_ewpc-2275_firmware	1.12.14.5
geutebrueck	g-cam_ewpc-2271_firmware	𝑥 ≤ 1.12.0.27
geutebrueck	g-cam_ewpc-2271_firmware	1.12.13.2
geutebrueck	g-cam_ewpc-2271_firmware	1.12.14.5

𝑥

= Vulnerable software versions

Known Exploits!

Common Weakness Enumeration

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/

https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03

https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/