CVE-2021-33551 UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33551

Multiple IP camera devices and video encoders from UDP Technology (used by Geutebrück and other vendors) are vulnerable to command injection due to the failure to properly handle special characters. This flaw allows an attacker to remotely execute arbitrary code with root privileges. Affected pro...

Geutebruck Remote Command Execution Exploit

This Metasploit module bypasses the HTTP basic authentication used to access the /uapi-cgi/ folder and exploits multiple authenticated arbitrary command execution vulnerabilities within the parameters of various pages on Geutebruck G-Cam EEC-2xxx and G-Code EBC-21xx, EFD-22xx, ETHC-22xx, and...

CVE-2021-33551

creationtimestamp| type| source ---|---|--- 2021-09-01 16:09:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/geutebruckcmdinjectcve2021335xx.rb 2021-09-13 22:15:07+00:00| seen| https://t.me/cibsecurity/28742 2025-02-06 03:13:45+00:00| seen|...