CVE-2021-33543
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.
Affected (48)
Products: Geutebrueck: G Cam Ebc 2110 Firmware, G Cam Ebc 2111 Firmware, G Cam Efd 2241 Firmware, G Cam Efd 2250 Firmware, G Cam Ethc 2230 Firmware, G Cam Ethc 2239 Firmware, G Cam Ethc 2240 Firmware, G Cam Ethc 2249 Firmware, G Cam Ewpc 2270 Firmware, G Code Eec 2400 Firmware, G Code Een 2010 Firmware, G Code Een 2040 Firmware, G Cam Ebc 2112 Firmware, G Cam Efd 2251 Firmware, G Cam Ewpc 2275 Firmware, G Cam Ewpc 2271 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Cam Ebc 2110 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Cam Ebc 2111 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Cam Efd 2241 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Cam Efd 2250 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Cam Ethc 2230 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Cam Ethc 2239 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Cam Ethc 2240 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Cam Ethc 2249 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Cam Ewpc 2270 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Code Eec 2400 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Code Een 2010 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Code Een 2040 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Cam Ebc 2112 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Cam Efd 2251 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Cam Ewpc 2275 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.12.0.27 |
| Running on/with | Platform Versions |
|---|---|
Geutebrueck G Cam Ewpc 2271 | All versions |
References (4)
Source: info@cert.vde.com
Third Party AdvisoryUS Government Resource
Source: info@cert.vde.com
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Timeline
No history available yet.