CVE-2021-33543

Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service...

Command injection

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

Stack overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code...

Command injection

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

Command injection

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

Command injection

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

Command injection

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

Command injection

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

Stack overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code...

Stack overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code...

Command injection

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

Stack overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33554 UDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33554

CVE-2021-33554 affects Geutebrück UDP Technology-based IP cameras (G-Cam E2 series; G-Code encoders/EEC-2xx, etc.) and related devices. The vulnerability is command injection in the appfile.filename parameter, enabling remote code execution. Affected firmware versions include ≤1.12.0.27 and 1.12....

CVE-2021-33553

CVE-2021-33553 corresponds to a command-injection vulnerability in UDP Technology firmware used by Geutebrück IP cameras (e.g., G-Cam E2 and G-Code EN/EC series). The flaw allows remote arbitrary code execution via manipulated parameters in authenticated contexts. Affected products include UDP Te...

CVE-2021-33552

CVE-2021-33552 affects Geutebrück UDP Technology-based IP cameras and G-Cam/E2, G-Code encoders with firmware versions 1.12.0.27, 1.12.13.2, 1.12.14.5 (and related EBC/EFD/ETHC/EWPC/EEC/EN variants). Root cause is command injection in the date parameter that can lead to remote arbitrary code exec...

CVE-2021-33552 UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33551 UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33551

CVE-2021-33551 affects Geutebrück UDP Technology-powered IP cameras (G-Cam E2 family and G-Code) where an environment.lang parameter vulnerability enables command injection leading to remote code execution. Affected firmware includes versions 1.12.0.27 and earlier, 1.12.13.2, and 1.12.14.5. Publi...

CVE-2021-33550

CVE-2021-33550 affects Geutebrück UDP Technology camera devices (G-Cam E2, G-Code) and related models. The vulnerability is a command-injection flaw in input handling (notably in the date parameter per CVE context) that can lead to remote code execution. Public sources confirm affected products i...