Stack overflow

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33554

CVE-2021-33554 affects Geutebrück UDP Technology-based IP cameras (G-Cam E2 series; G-Code encoders/EEC-2xx, etc.) and related devices. The vulnerability is command injection in the appfile.filename parameter, enabling remote code execution. Affected firmware versions include ≤1.12.0.27 and 1.12....

CVE-2021-33554 UDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33553

CVE-2021-33553 corresponds to a command-injection vulnerability in UDP Technology firmware used by Geutebrück IP cameras (e.g., G-Cam E2 and G-Code EN/EC series). The flaw allows remote arbitrary code execution via manipulated parameters in authenticated contexts. Affected products include UDP Te...

CVE-2021-33552

CVE-2021-33552 affects Geutebrück UDP Technology-based IP cameras and G-Cam/E2, G-Code encoders with firmware versions 1.12.0.27, 1.12.13.2, 1.12.14.5 (and related EBC/EFD/ETHC/EWPC/EEC/EN variants). Root cause is command injection in the date parameter that can lead to remote arbitrary code exec...

CVE-2021-33552 UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33551 UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33551

CVE-2021-33551 affects Geutebrück UDP Technology-powered IP cameras (G-Cam E2 family and G-Code) where an environment.lang parameter vulnerability enables command injection leading to remote code execution. Affected firmware includes versions 1.12.0.27 and earlier, 1.12.13.2, and 1.12.14.5. Publi...

CVE-2021-33550

CVE-2021-33550 affects Geutebrück UDP Technology camera devices (G-Cam E2, G-Code) and related models. The vulnerability is a command-injection flaw in input handling (notably in the date parameter per CVE context) that can lead to remote code execution. Public sources confirm affected products i...

CVE-2021-33550 UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33549

CVE-2021-33549 covers a stack-based buffer overflow in the action parameter of Geutebrück/G-Cam instantrec CGI (uapi-cgi/instantrec.cgi) affecting Geutebrück G-Cam E2, G-Cam EBC-21xx, G-Cam EFD-22xx, ETHC-22xx, EWPC-22xx and G-Code EEC-2xx/EEN-20xx with firmware versions 1.12.0.27 and earlier, pl...

CVE-2021-33549 UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33548

CVE-2021-33548 affects Geutebrück UDP Technology firmware used in Geutebrück G-Cam E2xx and G-Code EEC-2xx devices (and related EBC/EFD/ETHC/EWPC/EEN series). The issue is a command-injection vulnerability in multiple camera devices that can be triggered via crafted input, enabling remote code ex...

CVE-2021-33548 UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33547

CVE-2021-33547 is a stack-based buffer overflow in the profile parameter that could allow remote code execution on multiple IP cameras using UDP Technology firmware, notably Geutebrück G-Cam E2 and G-Code. Affected products and versions include E2 Series (G-CAM) versions 1.12.0.27 and earlier, 1....

CVE-2021-33547 UDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33546

CVE-2021-33546 is a stack-based buffer overflow in the name parameter that enables remote code execution on UDP Technology firmware used in Geutebrück IP cameras. Affected products per sources include Geutebrück G-Cam E2 (G-CAM) and G-Code encoders with specific firmwares: G-CAM versions 1.12.0.2...

CVE-2021-33546 UDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code...

CVE-2021-33545

CVE-2021-33545 affects Geutebrück UDP Technology-based IP cameras/encoders (G-Cam E2 series and G-Code encoder) with older Geutebrück firmware. The vulnerability is a stack-based buffer overflow in the counter parameter that can allow an unauthenticated attacker to remotely execute arbitrary code...

CVE-2021-33545 UDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCE

Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code...