CVE-2021-33548 UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33547 UDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33546

CVE-2021-33546 is a stack-based buffer overflow in the name parameter that enables remote code execution on UDP Technology firmware used in Geutebrück IP cameras. Affected products per sources include Geutebrück G-Cam E2 (G-CAM) and G-Code encoders with specific firmwares: G-CAM versions 1.12.0.2...

CVE-2021-33546 UDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33545

CVE-2021-33545 affects Geutebrück UDP Technology-based IP cameras/encoders (G-Cam E2 series and G-Code encoder) with older Geutebrück firmware. The vulnerability is a stack-based buffer overflow in the counter parameter that can allow an unauthenticated attacker to remotely execute arbitrary code...

CVE-2021-33545 UDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33544 UDP Technology/Geutebrück camera devices: command injection leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33544

CVE-2021-33544 affects Geutebrück UDP Technology IP cameras (G-Cam E2 and G-Code encoders) with affected UDP firmware (e.g., E2: 1.12.0.27 and earlier; 1.12.13.2; 1.12.14.5; G-Code: same). The issue is a command-injection vulnerability in the web-based management interface that enables remote arb...

CVE-2021-33543 UDP Technology/Geutebrück camera devices: Authentication Bypass

Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service...

PT-2021-20199 · Geutebrück · Camera Devices

Name of the Vulnerable Software and Affected Versions: Camera devices by UDP Technology, Geutebrück and other vendors affected versions not specified Description: The issue concerns command injection, which may allow an attacker to remotely execute arbitrary code on multiple camera devices...

PT-2021-20190 · Geutebrück +1 · Geutebrück Camera Devices +1

Name of the Vulnerable Software and Affected Versions: UDP Technology camera devices affected versions not specified Geutebrück camera devices affected versions not specified Description: The issue allows unauthenticated remote access to sensitive files due to default user authentication settings...

PT-2021-20202 · Geutebrück · Camera Devices

Name of the Vulnerable Software and Affected Versions: Camera devices by UDP Technology, Geutebrück and other vendors affected versions not specified Description: The issue concerns command injection, which may allow an attacker to remotely execute arbitrary code. Multiple camera devices from...

PT-2021-20191 · Geutebrück · Camera Devices

Name of the Vulnerable Software and Affected Versions: Camera devices by UDP Technology, Geutebrück and other vendors affected versions not specified Description: The issue concerns command injection, which may allow an attacker to remotely execute arbitrary code. This affects multiple camera...

Compro Technology IP Camera Denial Of Service

Exploit Title: Compro Technology IP Camera - 'killps.cgi' Denial-of-Service DoS Date: 2021-09-30 Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40378 There is a backdoor...

Compro Technology IP Camera - (killps.cgi) Denial of Service Exploit

Exploit Title: Compro Technology IP Camera - 'killps.cgi' Denial-of-Service DoS Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40378 There is a backdoor prefabricated in the...

Compro Technology IP Camera - (mjpegStreamer.cgi) Screenshot Disclosure Vulnerability

Exploit Title: Compro Technology IP Camera - ' mjpegStreamer.cgi' Screenshot Disclosure Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40382 There is an unauthorized access...

Compro Technology IP Camera Screenshot Disclosure

Exploit Title: Compro Technology IP Camera - ' mjpegStreamer.cgi' Screenshot Disclosure Date: 2021-09-30 Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40382 There is an...

Compro Technology IP Camera - ' index_MJpeg.cgi' Stream Disclosure

Exploit Title: Compro Technology IP Camera - ' indexMJpeg.cgi' Stream Disclosure Date: 2021-09-30 Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40381 Has an unauthorized acce...

Compro Technology IP Camera - RTSP stream disclosure (Unauthenticated) Vulnerability

Exploit Title: Compro Technology IP Camera - RTSP stream disclosure Unauthenticated Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40379 Some devices have unauthorized access ...

Geutebruck Remote Command Execution Exploit

This Metasploit module bypasses the HTTP basic authentication used to access the /uapi-cgi/ folder and exploits multiple authenticated arbitrary command execution vulnerabilities within the parameters of various pages on Geutebruck G-Cam EEC-2xxx and G-Code EBC-21xx, EFD-22xx, ETHC-22xx, and...