CVE-2021-33551 UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33551

Multiple IP camera devices and video encoders from UDP Technology (used by Geutebrück and other vendors) are vulnerable to command injection due to the failure to properly handle special characters. This flaw allows an attacker to remotely execute arbitrary code with root privileges. Affected pro...

CVE-2021-33550 UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33549 UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33548

Multiple camera devices and encoders by UDP Technology (including Geutebrück brands such as G-Cam E2 and G-Code ) are vulnerable to command injection due to improper handling of special characters by users. This flaw allows an attacker to remotely execute arbitrary code as the root user . Affecte...

CVE-2021-33548 UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33547 UDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33546 UDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33546

CVE-2021-33546 is a stack-based buffer overflow in the name parameter that enables remote code execution on UDP Technology firmware used in Geutebrück IP cameras. Affected products per sources include Geutebrück G-Cam E2 (G-CAM) and G-Code encoders with specific firmwares: G-CAM versions 1.12.0.2...

CVE-2021-33545 UDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33545

CVE-2021-33545 affects Geutebrück UDP Technology-based IP cameras/encoders (G-Cam E2 series and G-Code encoder) with older Geutebrück firmware. The vulnerability is a stack-based buffer overflow in the counter parameter that can allow an unauthenticated attacker to remotely execute arbitrary code...

CVE-2021-33544

CVE-2021-33544 affects Geutebrück UDP Technology IP cameras (G-Cam E2 and G-Code encoders) with affected UDP firmware (e.g., E2: 1.12.0.27 and earlier; 1.12.13.2; 1.12.14.5; G-Code: same). The issue is a command-injection vulnerability in the web-based management interface that enables remote arb...

CVE-2021-33544 UDP Technology/Geutebrück camera devices: command injection leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33543 UDP Technology/Geutebrück camera devices: Authentication Bypass

Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service...

CVE-2021-33553: Improper Neutralization of Special Elements used in an OS Command

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

PT-2021-20191 · Geutebrück · Camera Devices

Name of the Vulnerable Software and Affected Versions: Camera devices by UDP Technology, Geutebrück and other vendors affected versions not specified Description: The issue concerns command injection, which may allow an attacker to remotely execute arbitrary code. This affects multiple camera...

PT-2021-20194

Name of the Vulnerable Software and Affected Versions UDP Technology camera devices affected versions not specified Geutebrück camera devices affected versions not specified Description The issue is related to a stack-based buffer overflow condition in the profile parameter. This may allow an...

PT-2021-20196

Name of the Vulnerable Software and Affected Versions Geutebrück camera devices affected versions not specified UDP Technology camera devices affected versions not specified Description The issue is related to a stack-based buffer overflow condition in the action parameter, potentially allowing a...

PT-2021-20193

Name of the Vulnerable Software and Affected Versions UDP Technology camera devices affected versions not specified Geutebrück camera devices affected versions not specified Description The issue is related to a stack-based buffer overflow condition in the name parameter. This may allow an attack...

CVE-2021-33545: Stack-based Buffer Overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code...