CVEvulnerability
CVE-2018-19007
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-12-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-78
Description
In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable to an OS system command injection as root.
Affected configurations
• geutebrueck g-cam\/efd-2251 firmware (< 1.12.0.25)
• geutebrueck g-cam\/ewpc-2275 firmware (< 1.12.0.25)
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://www.securityfocus.com/bid/106208 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-347-03 Mitigation, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/106208 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-347-03 Mitigation, Third Party Advisory, US Government Resource