CVE-2018-7528 An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an attacker to alter stored data.
CriticalCVSS 9.1
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An SQL injection vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras, which may allow an attacker to alter stored data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| geutebrueck g-camefd-2250 firmware | = 1.12.0.4 | No fix listed |
| geutebrueck topfd-2125 firmware | = 3.15.1 | No fix listed |
| Geutebrück G-Cam/EFD-2250 (part n° 5.02024) firmware and Topline TopFD-2125 (part n° 5.02820) firmware | = G-Cam/EFD-2250 version 1.12.0.4 and Topline TopFD-2125 version 3.15.1 | No fix listed |
References
- 103474 third-party-advisory vdb-entry
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource