CVE-2018-19007 In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable to an OS system command injection as root.
CriticalCVSS 9.8
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable to an OS system command injection as root.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| geutebrueck g-camefd-2251 firmware | < 1.12.0.25 | 1.12.0.25 |
| geutebrueck g-camewpc-2275 firmware | < 1.12.0.25 | 1.12.0.25 |
References
- 106208 third-party-advisory vdb-entry
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource