PT-2025-44788 · Geutebruck · Geutebruck G-Cam E-Series Cameras

Published 2025-11-03 · Updated 2025-11-03 · CVE-2025-12463

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Geutebruck G-Cam E-Series Cameras version 1.12.0.19

Description An unauthenticated SQL Injection exists within the Geutebruck G-Cam E-Series Cameras. The issue is located in the /uapi-cgi/viewer/Param.cgi script through the Group parameter.

Recommendations Update firmware to a version that addresses this issue. As a temporary workaround, restrict access to the /uapi-cgi/viewer/Param.cgi script.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-12463

Affected Products

Geutebruck G-Cam E-Series Cameras

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-12463 · Security Note
• https://blog.blacklanternsecurity.com/p/cve-2025-12463-98-unauthenticated · Note
• https://t.me/CVEtracker/36437 · Telegram Post
• https://blog.blacklanternsecurity.com/p/9766f926-7189-4f15-b744-c7cc89c0f6db · Note