Lucene search

[email protected]CVE-2018-7528

HistoryMar 22, 2018 - 6:29 p.m.

CVE-2018-7528

2018-03-2218:29:00

CWE-89

[email protected]

web.nvd.nist.gov

sql injection

geutebruck

g-cam

efd-2250

topline

topfd-2125

vulnerability

nvd

cve-2018-7528

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.6 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.1 Low

EPSS

Percentile

94.9%

JSON

An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an attacker to alter stored data.

CPENameOperatorVersion
geutebrueck:g-cam\/efd-2250_firmwaregeutebrueck g-cam\/efd-2250 firmwareeq1.12.0.4
geutebrueck:topfd-2125_firmwaregeutebrueck topfd-2125 firmwareeq3.15.1

CPE	Name	Operator	Version
geutebrueck:g-cam\/efd-2250_firmware	geutebrueck g-cam\/efd-2250 firmware	eq	1.12.0.4
geutebrueck:topfd-2125_firmware	geutebrueck topfd-2125 firmware	eq	3.15.1

References

www.securityfocus.com/bid/103474

ics-cert.us-cert.gov/advisories/ICSA-18-079-01

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.6 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.1 Low

EPSS

Percentile

94.9%

JSON

Related for CVE-2018-7528

prion1 ics1