CVE-2018-7532

CVE-2018-7532 affects Geutebruck IP cameras: G-Cam/EFD-2250 v1.12.0.4 and Topline TopFD-2125 v3.15.1, with an unauthenticated remote code execution vulnerability due to improper authentication (CWE-287). The CVSS v3 base score is 9.8 (CRITICAL); vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indica...

CVE-2018-7524

Geutebruck IP cameras G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (firmware 3.15.1) are affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2018-7524). The issue may allow an unauthenticated or unauthorized user to be added to the system. The NVD/NIST entry documents ...

CVE-2018-7528

The CVE-2018-7528 entry documents an SQL injection vulnerability in Geutebruck G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (firmware 3.15.1) IP cameras, allowing an attacker to alter stored data. Root cause: improper handling of SQL commands in the affected components, enabling a re...

CVE-2018-7520

Geutebruck CVE-2018-7520 affects G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (3.15.1). The root cause is improper access control, enabling full configuration download (including passwords) and, per public advisories and exploit records, remote command execution via the /uapi-cgi/vie...

CVE-2018-7520

An improper access control vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could allow a full configuration download, including passwords...

CVE-2018-7532

Unauthentication vulnerabilities have been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution...

CVE-2018-7516

A server-side request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could lead to proxied network scans...

CVE-2018-7512

CVE-2018-7512 affects Geutebruck G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (firmware 3.15.1). A Cross-Site Scripting vulnerability may allow remote code execution via the device web interface. The public docs describe XSS as part of multiple vulnerabilities, with a CVSS v3 base sc...

Geutebruck IP Cameras Cross-Site Request Forgery Vulnerability (CNVD-2018-06022)

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A server-side request forgery vulnerability exists in Geutebruck IP Cameras, which can be exploited by an attacker to proxy network scans...

Geutebruck IP Cameras Cross-Site Scripting Vulnerability

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A cross-site scripting vulnerability exists in Geutebruck IP Cameras, which can be exploited by remote attackers to execute arbitrary code...

Geutebruck IP Cameras Remote Code Execution Vulnerability

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A remote code execution vulnerability exists in Geutebruck IP Cameras, which can be exploited by an attacker to execute arbitrary code...

Geutebruck IP Cameras SQL Injection Vulnerability

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A SQL injection vulnerability exists in Geutebruck IP Cameras, which allows attackers to exploit the vulnerability to alter stored data...

Geutebruck IP Cameras Cross-Site Request Forgery Vulnerability

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A cross-site request forgery vulnerability exists in Geutebruck IP Cameras, which can be exploited by an attacker to add unauthorized users to the system...

Amazon Linux AMI : samba (ALAS-2017-834) (SambaCry)

A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root. CVE-2017-7494 It was found that Samba always requested forwardable tickets when using Kerberos authentication. A...

RHEL 7 : samba (RHSA-2017:1265)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1265 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

RedHat Update for samba RHSA-2017:1265-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ctdb, libsmbclient, libwbclient, samba security update

CentOS Errata and Security Advisory CESA-2017:1265 An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

samba security and bug fix update

4.4.4-13 - resolves: 1437816 - Fix krb5 memory cache in libads sasl code - resolves: 1437741 - Fix CVE-2016-2125, CVE-2016-2126 and CVE-2017-2619...

CVE-2017-2125

CVE-2017-2125 describes a privilege escalation in the CentreCOM AR260S V2 router. An attacker who can log into the product as the guests account may obtain administrative privileges, enabling unintended operations. The root cause is a vulnerability in the guest account abuse pathway that allows p...

Scientific Linux Security Update : samba on SL6.x i386/x86_64 (20170321)

Security Fixes : - It was found that Samba always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users. CVE-2016-2125 - A flaw was found in t...