CVE-2018-7516

Published: Mar 22, 2018Modified: Nov 21, 2024

7.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: NVD

Description

A server-side request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which could lead to proxied network scans.

Affected (2)

Products: Geutebrueck: G Cam/efd 2250 Firmware, Topfd 2125 Firmware

Geutebrueck

2 products

G Cam/efd 2250 Firmware

Topfd 2125 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geutebrueck G Cam/efd 2250 Firmware	Version 1.12.0.4

Running on/with	Platform Versions
Geutebrueck G Cam/efd 2250	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geutebrueck Topfd 2125 Firmware	Version 3.15.1

Running on/with	Platform Versions
Geutebrueck Topfd 2125	All versions

Related CWEs

CWE-918

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (4)

http://www.securityfocus.com/bid/103474

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01

Source: ics-cert@hq.dhs.gov

MitigationThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/103474

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-18-079-01

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationThird Party AdvisoryUS Government Resource

Timeline

No history available yet.