CVE-2021-33551 UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33551

CVE-2021-33551 affects Geutebrück UDP Technology-powered IP cameras (G-Cam E2 family and G-Code) where an environment.lang parameter vulnerability enables command injection leading to remote code execution. Affected firmware includes versions 1.12.0.27 and earlier, 1.12.13.2, and 1.12.14.5. Publi...

Geutebruck Remote Command Execution Exploit

This Metasploit module bypasses the HTTP basic authentication used to access the /uapi-cgi/ folder and exploits multiple authenticated arbitrary command execution vulnerabilities within the parameters of various pages on Geutebruck G-Cam EEC-2xxx and G-Code EBC-21xx, EFD-22xx, ETHC-22xx, and...

CVE-2021-33551

creationtimestamp| type| source ---|---|--- 2021-09-01 16:09:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/geutebruckcmdinjectcve2021335xx.rb 2021-09-13 22:15:07+00:00| seen| https://t.me/cibsecurity/28742 2025-02-06 03:13:45+00:00| seen|...