CVE-2019-10956

Published: Jan 17, 2020Modified: Nov 21, 2024

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root.

Affected (11)

Products: Geutebrueck: G Code Eec 2400 Firmware, G Cam Ebc 2110 Firmware, G Cam Ebc 2111 Firmware, G Cam Efd 2240 Firmware, G Cam Efd 2241 Firmware, G Cam Efd 2250 Firmware, G Cam Ethc 2230 Firmware, G Cam Ethc 2240 Firmware, G Cam Ethc 2239 Firmware, G Cam Ethc 2249 Firmware, G Cam Ewpc 2270 Firmware

11 products

G Code Eec 2400 Firmware

G Cam Ebc 2110 Firmware

G Cam Ebc 2111 Firmware

G Cam Efd 2240 Firmware

G Cam Efd 2241 Firmware

G Cam Efd 2250 Firmware

G Cam Ethc 2230 Firmware

G Cam Ethc 2240 Firmware

G Cam Ethc 2239 Firmware

G Cam Ethc 2249 Firmware

G Cam Ewpc 2270 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geutebrueck G Code Eec 2400 Firmware	Up to 1.12.0.25

Running on/with	Platform Versions
Geutebrueck G Code Eec 2400	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geutebrueck G Cam Ebc 2110 Firmware	Up to 1.12.0.25

Running on/with	Platform Versions
Geutebrueck G Cam Ebc 2110	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geutebrueck G Cam Ebc 2111 Firmware	Up to 1.12.0.25

Running on/with	Platform Versions
Geutebrueck G Cam Ebc 2111	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geutebrueck G Cam Efd 2240 Firmware	Up to 1.12.0.25

Running on/with	Platform Versions
Geutebrueck G Cam Efd 2240	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geutebrueck G Cam Efd 2241 Firmware	Up to 1.12.0.25

Running on/with	Platform Versions
Geutebrueck G Cam Efd 2241	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geutebrueck G Cam Efd 2250 Firmware	Up to 1.12.0.25

Running on/with	Platform Versions
Geutebrueck G Cam Efd 2250	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geutebrueck G Cam Ethc 2230 Firmware	Up to 1.12.0.25

Running on/with	Platform Versions
Geutebrueck G Cam Ethc 2230	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geutebrueck G Cam Ethc 2240 Firmware	Up to 1.12.0.25

Running on/with	Platform Versions
Geutebrueck G Cam Ethc 2240	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geutebrueck G Cam Ethc 2239 Firmware	Up to 1.12.0.25

Running on/with	Platform Versions
Geutebrueck G Cam Ethc 2239	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geutebrueck G Cam Ethc 2249 Firmware	Up to 1.12.0.25

Running on/with	Platform Versions
Geutebrueck G Cam Ethc 2249	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Geutebrueck G Cam Ewpc 2270 Firmware	Up to 1.12.0.25

Running on/with	Platform Versions
Geutebrueck G Cam Ewpc 2270	All versions

Related CWEs

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (2)

https://www.us-cert.gov/ics/advisories/ICSA-19-155-03

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.us-cert.gov/ics/advisories/ICSA-19-155-03

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.