CVE-2017-5173 An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnerab...
CriticalCVSS 9.8
EPSS 29.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An improper neutralization of special elements vulnerability has been identified. If special elements are not properly neutralized, an attacker can call multiple parameters that can allow access to the root level operating system which could allow remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| geutebrueck ip camera g-cam efd-2250 firmware | = 1.11.0.12 | No fix listed |
References
- 96209 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- 41360 exploit third-party-advisory vdb-entry