Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

VULNERABILITIES

CVE-2019-10956 Details

Description

Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.2 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.us-cert.gov/ics/advisories/ICSA-19-155-03	CVE	Third Party AdvisoryUS Government Resource
https://www.us-cert.gov/ics/advisories/ICSA-19-155-03	[email protected]	Third Party AdvisoryUS Government Resource

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-78	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	[email protected]
CWE-78	Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	[email protected]

Affected Products

Product	Versions
geutebrueck g-code eec-2400 firmware	<= 1.12.0.25
CPE cpe:2.3:o:geutebrueck:g-code_eec-2400_firmware:::::::: Remediation No remediation found in references.
geutebrueck g-code eec-2400	All versions
CPE cpe:2.3:h:geutebrueck:g-code_eec-2400:-:::::::* Remediation No remediation found in references.
geutebrueck g-cam ebc-2110 firmware	<= 1.12.0.25
CPE cpe:2.3:o:geutebrueck:g-cam_ebc-2110_firmware:::::::: Remediation No remediation found in references.
geutebrueck g-cam ebc-2110	All versions
CPE cpe:2.3:h:geutebrueck:g-cam_ebc-2110:-:::::::* Remediation No remediation found in references.
geutebrueck g-cam ebc-2111 firmware	<= 1.12.0.25
CPE cpe:2.3:o:geutebrueck:g-cam_ebc-2111_firmware:::::::: Remediation No remediation found in references.
geutebrueck g-cam ebc-2111	All versions
CPE cpe:2.3:h:geutebrueck:g-cam_ebc-2111:-:::::::* Remediation No remediation found in references.
geutebrueck g-cam efd-2240 firmware	<= 1.12.0.25
CPE cpe:2.3:o:geutebrueck:g-cam_efd-2240_firmware:::::::: Remediation No remediation found in references.
geutebrueck g-cam efd-2240	All versions
CPE cpe:2.3:h:geutebrueck:g-cam_efd-2240:-:::::::* Remediation No remediation found in references.
geutebrueck g-cam efd-2241 firmware	<= 1.12.0.25
CPE cpe:2.3:o:geutebrueck:g-cam_efd-2241_firmware:::::::: Remediation No remediation found in references.
geutebrueck g-cam efd-2241	All versions
CPE cpe:2.3:h:geutebrueck:g-cam_efd-2241:-:::::::* Remediation No remediation found in references.
geutebrueck g-cam efd-2250 firmware	<= 1.12.0.25
CPE cpe:2.3:o:geutebrueck:g-cam_efd-2250_firmware:::::::: Remediation No remediation found in references.
geutebrueck g-cam efd-2250	All versions
CPE cpe:2.3:h:geutebrueck:g-cam_efd-2250:-:::::::* Remediation No remediation found in references.
geutebrueck g-cam ethc-2230 firmware	<= 1.12.0.25
CPE cpe:2.3:o:geutebrueck:g-cam_ethc-2230_firmware:::::::: Remediation No remediation found in references.
geutebrueck g-cam ethc-2230	All versions
CPE cpe:2.3:h:geutebrueck:g-cam_ethc-2230:-:::::::* Remediation No remediation found in references.
geutebrueck g-cam ethc-2240 firmware	<= 1.12.0.25
CPE cpe:2.3:o:geutebrueck:g-cam_ethc-2240_firmware:::::::: Remediation No remediation found in references.
geutebrueck g-cam ethc-2240	All versions
CPE cpe:2.3:h:geutebrueck:g-cam_ethc-2240:-:::::::* Remediation No remediation found in references.
geutebrueck g-cam ethc-2239 firmware	<= 1.12.0.25
CPE cpe:2.3:o:geutebrueck:g-cam_ethc-2239_firmware:::::::: Remediation No remediation found in references.
geutebrueck g-cam ethc-2239	All versions
CPE cpe:2.3:h:geutebrueck:g-cam_ethc-2239:-:::::::* Remediation No remediation found in references.
geutebrueck g-cam ethc-2249 firmware	<= 1.12.0.25
CPE cpe:2.3:o:geutebrueck:g-cam_ethc-2249_firmware:::::::: Remediation No remediation found in references.
geutebrueck g-cam ethc-2249	All versions
CPE cpe:2.3:h:geutebrueck:g-cam_ethc-2249:-:::::::* Remediation No remediation found in references.
geutebrueck g-cam ewpc-2270 firmware	<= 1.12.0.25
CPE cpe:2.3:o:geutebrueck:g-cam_ewpc-2270_firmware:::::::: Remediation No remediation found in references.
geutebrueck g-cam ewpc-2270	All versions
CPE cpe:2.3:h:geutebrueck:g-cam_ewpc-2270:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

CVE-2019-10956 Details - Not Deferred