Geutebruck 5.02024 G-Cam/EFD-2250 - 'simple_loglistjs.cgi' Remote Command Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Geutebruck simpleloglistjs.cgi Remote Command Execution', 'Description' = %q This module exploits a an arbitrary command execution vulnerability...

CVE-2018-7524

A cross-site request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an unauthorized user to be added to the system...

CVE-2018-7532

Unauthentication vulnerabilities have been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution...

CVE-2018-7528

An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an attacker to alter stored data...

CVE-2018-7532

Unauthentication vulnerabilities have been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution...

CVE-2018-7528

An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an attacker to alter stored data...

Improper access control

An improper access control vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could allow a full configuration download, including passwords...

Sql injection

An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an attacker to alter stored data...

CVE-2018-7516

A server-side request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could lead to proxied network scans...

CVE-2018-7528

The CVE-2018-7528 entry documents an SQL injection vulnerability in Geutebruck G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (firmware 3.15.1) IP cameras, allowing an attacker to alter stored data. Root cause: improper handling of SQL commands in the affected components, enabling a re...

CVE-2018-7524

Geutebruck IP cameras G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (firmware 3.15.1) are affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2018-7524). The issue may allow an unauthenticated or unauthorized user to be added to the system. The NVD/NIST entry documents ...

CVE-2018-7532

CVE-2018-7532 affects Geutebruck IP cameras: G-Cam/EFD-2250 v1.12.0.4 and Topline TopFD-2125 v3.15.1, with an unauthenticated remote code execution vulnerability due to improper authentication (CWE-287). The CVSS v3 base score is 9.8 (CRITICAL); vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indica...

CVE-2018-7520

Geutebruck CVE-2018-7520 affects G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (3.15.1). The root cause is improper access control, enabling full configuration download (including passwords) and, per public advisories and exploit records, remote command execution via the /uapi-cgi/vie...

CVE-2018-7512

CVE-2018-7512 affects Geutebruck G-Cam/EFD-2250 (firmware 1.12.0.4) and Topline TopFD-2125 (firmware 3.15.1). A Cross-Site Scripting vulnerability may allow remote code execution via the device web interface. The public docs describe XSS as part of multiple vulnerabilities, with a CVSS v3 base sc...

CVE-2018-7520

An improper access control vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could allow a full configuration download, including passwords...

CVE-2018-7532

Unauthentication vulnerabilities have been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow remote code execution...

Geutebruck IP Cameras Cross-Site Request Forgery Vulnerability (CNVD-2018-06022)

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A server-side request forgery vulnerability exists in Geutebruck IP Cameras, which can be exploited by an attacker to proxy network scans...

Geutebruck IP Cameras Cross-Site Scripting Vulnerability

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A cross-site scripting vulnerability exists in Geutebruck IP Cameras, which can be exploited by remote attackers to execute arbitrary code...

Geutebruck IP Cameras Remote Code Execution Vulnerability

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A remote code execution vulnerability exists in Geutebruck IP Cameras, which can be exploited by an attacker to execute arbitrary code...

Geutebruck IP Cameras SQL Injection Vulnerability

The G-Cam/EFD-2250 and Topline TopFD-2125 are both HD cameras from Geutebruck. A SQL injection vulnerability exists in Geutebruck IP Cameras, which allows attackers to exploit the vulnerability to alter stored data...