PT-2017-16363 · Geutebruck · Geutebruck Ip Camera G-Cam/Efd-2250

Florent Montel + 1 · Published 2017-05-19 · Updated 2019-10-03 · CVE-2017-5174

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Geutebruck IP Camera G-Cam/EFD-2250 version 1.11.0.12

Description An Authentication Bypass issue was discovered, allowing attackers to bypass access control, which may enable remote code execution due to the existing file system architecture.

Recommendations For Geutebruck IP Camera G-Cam/EFD-2250 version 1.11.0.12, consider restricting access to the device until a patch or fix is available to prevent potential remote code execution.

Exploit

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2017-5174

Affected Products

Geutebruck Ip Camera G-Cam/Efd-2250

References · 5

• 🔥 https://exploit-db.com/exploits/41360 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-5174 · Security Note
• https://osv.dev/vulnerability/CVE-2017-5174 · Vendor Advisory
• http://securityfocus.com/bid/96209 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-045-02 · Note