medium4.8
CVE-2019-10957
Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated attacke…
Impact
Geutebruck IP Cameras G-Code(EEC-2xxx), G-Cam(EBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx): All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in code execution within the user’s browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Geutebrueck | G-Code Eec-2400 Firmware | through 1.12.0.25 |
| Geutebrueck | G-Cam Ebc-2110 Firmware | through 1.12.0.25 |
| Geutebrueck | G-Cam Ebc-2111 Firmware | through 1.12.0.25 |
| Geutebrueck | G-Cam Efd-2240 Firmware | through 1.12.0.25 |
| Geutebrueck | G-Cam Efd-2241 Firmware | through 1.12.0.25 |
| Geutebrueck | G-Cam Efd-2250 Firmware | through 1.12.0.25 |
| Geutebrueck | G-Cam Ethc-2230 Firmware | through 1.12.0.25 |
| Geutebrueck | G-Cam Ethc-2240 Firmware | through 1.12.0.25 |
| Geutebrueck | G-Cam Ethc-2239 Firmware | through 1.12.0.25 |
| Geutebrueck | G-Cam Ethc-2249 Firmware | through 1.12.0.25 |
| Geutebrueck | G-Cam Ewpc-2270 Firmware | through 1.12.0.25 |