CVE-2021-33544

CVE-2021-33544 affects Geutebrück UDP Technology IP cameras (G-Cam E2 and G-Code encoders) with affected UDP firmware (e.g., E2: 1.12.0.27 and earlier; 1.12.13.2; 1.12.14.5; G-Code: same). The issue is a command-injection vulnerability in the web-based management interface that enables remote arb...

CVE-2021-33543 UDP Technology/Geutebrück camera devices: Authentication Bypass

Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service...

CVE-2021-33553: Improper Neutralization of Special Elements used in an OS Command

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33550: Improper Neutralization of Special Elements used in an OS Command

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

PT-2021-20199 · Geutebrück · Camera Devices

Name of the Vulnerable Software and Affected Versions: Camera devices by UDP Technology, Geutebrück and other vendors affected versions not specified Description: The issue concerns command injection, which may allow an attacker to remotely execute arbitrary code on multiple camera devices...

PT-2021-20190 · Geutebrück +1 · Geutebrück Camera Devices +1

Name of the Vulnerable Software and Affected Versions: UDP Technology camera devices affected versions not specified Geutebrück camera devices affected versions not specified Description: The issue allows unauthenticated remote access to sensitive files due to default user authentication settings...

PT-2021-20194

Name of the Vulnerable Software and Affected Versions UDP Technology camera devices affected versions not specified Geutebrück camera devices affected versions not specified Description The issue is related to a stack-based buffer overflow condition in the profile parameter. This may allow an...

PT-2021-20193

Name of the Vulnerable Software and Affected Versions UDP Technology camera devices affected versions not specified Geutebrück camera devices affected versions not specified Description The issue is related to a stack-based buffer overflow condition in the name parameter. This may allow an attack...

CVE-2021-33552: Improper Neutralization of Special Elements used in an OS Command

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33549: Stack-based Buffer Overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code...

PT-2021-20191 · Geutebrück · Camera Devices

Name of the Vulnerable Software and Affected Versions: Camera devices by UDP Technology, Geutebrück and other vendors affected versions not specified Description: The issue concerns command injection, which may allow an attacker to remotely execute arbitrary code. This affects multiple camera...

PT-2021-20202 · Geutebrück · Camera Devices

Name of the Vulnerable Software and Affected Versions: Camera devices by UDP Technology, Geutebrück and other vendors affected versions not specified Description: The issue concerns command injection, which may allow an attacker to remotely execute arbitrary code. Multiple camera devices from...

PT-2021-20196

Name of the Vulnerable Software and Affected Versions Geutebrück camera devices affected versions not specified UDP Technology camera devices affected versions not specified Description The issue is related to a stack-based buffer overflow condition in the action parameter, potentially allowing a...

CVE-2021-33551: Improper Neutralization of Special Elements used in an OS Command

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33548: Improper Neutralization of Special Elements used in an OS Command

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33545: Stack-based Buffer Overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code...

Compro Technology IP Camera Screenshot Disclosure

Exploit Title: Compro Technology IP Camera - ' mjpegStreamer.cgi' Screenshot Disclosure Date: 2021-09-30 Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40382 There is an...

Compro Technology IP Camera Denial Of Service

Exploit Title: Compro Technology IP Camera - 'killps.cgi' Denial-of-Service DoS Date: 2021-09-30 Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40378 There is a backdoor...

Compro Technology IP Camera - (mjpegStreamer.cgi) Screenshot Disclosure Vulnerability

Exploit Title: Compro Technology IP Camera - ' mjpegStreamer.cgi' Screenshot Disclosure Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40382 There is an unauthorized access...

Compro Technology IP Camera - (killps.cgi) Denial of Service Exploit

Exploit Title: Compro Technology IP Camera - 'killps.cgi' Denial-of-Service DoS Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40378 There is a backdoor prefabricated in the...