PT-2021-20190 · Geutebrück+1 · Geutebrück Camera Devices+1

Published 2021-09-13 · Updated 2022-09-10 · CVE-2021-33543

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions UDP Technology camera devices (affected versions not specified) Geutebrück camera devices (affected versions not specified)

Description The issue allows unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.

Recommendations For UDP Technology camera devices, change the default user authentication settings to prevent unauthenticated access. For Geutebrück camera devices, modify the default user authentication settings to restrict access to sensitive files. As a temporary workaround, consider restricting remote access to the devices until a more permanent solution is implemented.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2021-33543

Affected Products

Geutebrück Camera Devices

Udp Technology Camera Devices

References · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/geutebruck_cmdinject_cve_2021_335xx.rb · Exploit
• 🔥 https://randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities · Exploit
• https://osv.dev/vulnerability/CVE-2021-33543 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33543 · Security Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03 · Note
• https://t.me/cvenotify/21503 · Telegram Post