Command injection

Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5...

CVE-2020-16205

Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5...

CVE-2020-16205

CVE-2020-16205 affects Geutebruck Geutebruck G-Cam and G-Code devices (encoder and camera models) with firmware versions 1.12.0.25 and prior, plus limited 1.12.13.2 and 1.12.14.5. The issue is an authenticated OS command injection vulnerability in the web interface: a remote attacker with valid c...

CVE-2020-16205: Improper Neutralization of Special Elements used in an OS Command

Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5...

Geutebrück G-Cam and G-Code

1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: Geutebrück Equipment: G-Cam and G-Code Vulnerability: OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow remote code...

CVE-2019-10956

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root...

CVE-2019-10957

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in...

Design/Logic Flaw

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root...

CVE-2019-10958

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to network configuration to supply system commands to the server, leading to remote code execution as root...

CVE-2019-10958

Geutebruck IP Cameras G-Code (EEC-2xxx) and G-Cam (EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx) are affected by CVE-2019-10958. All versions up to 1.12.0.25 may allow a remote authenticated attacker with network configuration access to supply system commands to the server, leading to remote code execut...

CVE-2019-10957

CVE-2019-10957 affects Geutebrück G-Code (EEC-2xxx) and G-Cam (EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx) where all versions up to 1.12.0.25 are vulnerable. The issue is an improper neutralization of input during web page generation (cross-site scripting) that allows a remote authenticated attacker w...

CVE-2019-10957

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in...

CVE-2019-10956

Geutebruck IP Cameras G-Code (EEC-2xxx) and G-Cam (EBC-21xx, EFD-22xx, ETHC-22xx, EWPC-22xx) with firmware up to 1.12.0.25 are affected by CVE-2019-10956 via OS command injection. A remote authenticated user can send a specially crafted URL command to the device and execute commands with root pri...

PT-2020-9161 · Geutebruck · Geutebruck Ip Cameras G-Cam +1

Name of the Vulnerable Software and Affected Versions: Geutebruck IP Cameras G-CodeEEC-2xxx versions 1.12.0.25 and prior Geutebruck IP Cameras G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx versions 1.12.0.25 and prior Description: The issue allows a remote authenticated attacker with access to event...

CVE-2019-10956: Improper Neutralization of Special Elements used in an OS Command

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root...

CVE-2019-10958: Improper Neutralization of Special Elements used in an OS Command

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to network configuration to supply system commands to the server, leading to remote code execution as root...

CVE-2019-10957: Improper Neutralization of Input During Web Page Generation

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in...

Geutebrück G-Cam and G-Code OS Command Injection Vulnerabilities

G-Cam is a series of webcams from Geutebrück.G-Code is an analog video encoder from Geutebrück. An OS command injection vulnerability exists in Geutebrück G-Cam and G-Code. The vulnerability stems from a network system or product not properly filtering special characters, commands, etc. from...

Geutebrück G-Cam and G-Code Cross-Site Scripting Vulnerabilities

G-Cam is a series of webcams from Geutebrück.G-Code is an analog video encoder from Geutebrück. A cross-site scripting vulnerability exists in Geutebrück G-Cam and G-Code. The vulnerability stems from a lack of proper validation of client data by the WEB application. An attacker can exploit the...

Geutebrück G-Cam and G-Code OS Command Injection Vulnerabilities

G-Cam is a series of webcams from Geutebrück.G-Code is an analog video encoder from Geutebrück. An OS command injection vulnerability exists in Geutebrück G-Cam and G-Code. The vulnerability stems from a network system or product not properly filtering special characters, commands, etc. from...