PT-2017-16363 · Geutebruck · Geutebruck Ip Camera G-Cam/Efd-2250

Florent Montel + 1 · Publicado 2017-05-19 · Atualizado 2019-10-03 · CVE-2017-5174

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Geutebruck IP Camera G-Cam/EFD-2250 version 1.11.0.12

Description An Authentication Bypass issue was discovered, allowing attackers to bypass access control, which may enable remote code execution due to the existing file system architecture.

Recommendations For Geutebruck IP Camera G-Cam/EFD-2250 version 1.11.0.12, consider restricting access to the device until a patch or fix is available to prevent potential remote code execution.

Exploit

Correção

Authentication Bypass Using an Alternate Path or Channel

Enumeração de Fraquezas

CWE-288

Identificadores relacionados

CVE-2017-5174

Produtos afetados

Geutebruck Ip Camera G-Cam/Efd-2250

Referências · 5

• 🔥 https://exploit-db.com/exploits/41360 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-5174 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-5174 · Aviso do Fabricante
• http://securityfocus.com/bid/96209 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02 · Nota