← Back

CVE-2018-19007

nvd nist
Published: Dec 14, 2018Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable to an OS system command injection as root.

Affected (2)

Geutebrueck
2 products
G Cam/efd 2251 Firmware
G Cam/ewpc 2275 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
G Cam/efd 2251 Firmware
Before 1.12.0.25
Running on/withPlatform Versions
Geutebrueck
G Cam/efd 2251
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
G Cam/ewpc 2275 Firmware
Before 1.12.0.25
Running on/withPlatform Versions
Geutebrueck
G Cam/ewpc 2275
All versions

Related CWEs

CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (4)

Source: ics-cert@hq.dhs.gov
Third Party AdvisoryVDB Entry
Source: ics-cert@hq.dhs.gov
MitigationThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party AdvisoryUS Government Resource

Timeline

No history available yet.