54 matches found
Command injection
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
Stack overflow
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code...
Stack overflow
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code...
Stack overflow
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code...
Command injection
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
Command injection
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-33543
Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service...
Command injection
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-33554 UDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-33553 UDP Technology/Geutebrück camera devices: Command injection in command parameter leading to RCE
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-33553
CVE-2021-33553 corresponds to a command-injection vulnerability in UDP Technology firmware used by Geutebrück IP cameras (e.g., G-Cam E2 and G-Code EN/EC series). The flaw allows remote arbitrary code execution via manipulated parameters in authenticated contexts. Affected products include UDP Te...
CVE-2021-33552
CVE-2021-33552 affects Geutebrück UDP Technology-based IP cameras and G-Cam/E2, G-Code encoders with firmware versions 1.12.0.27, 1.12.13.2, 1.12.14.5 (and related EBC/EFD/ETHC/EWPC/EEC/EN variants). Root cause is command injection in the date parameter that can lead to remote arbitrary code exec...
CVE-2021-33552 UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-33551 UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-33551
CVE-2021-33551 affects Geutebrück UDP Technology-powered IP cameras (G-Cam E2 family and G-Code) where an environment.lang parameter vulnerability enables command injection leading to remote code execution. Affected firmware includes versions 1.12.0.27 and earlier, 1.12.13.2, and 1.12.14.5. Publi...
CVE-2021-33550 UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-33549 UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-33548 UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...
CVE-2021-33548
CVE-2021-33548 affects Geutebrück UDP Technology firmware used in Geutebrück G-Cam E2xx and G-Code EEC-2xx devices (and related EBC/EFD/ETHC/EWPC/EEN series). The issue is a command-injection vulnerability in multiple camera devices that can be triggered via crafted input, enabling remote code ex...
CVE-2021-33547 UDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCE
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code...