high7.2
CVE-2020-16205
Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior …
Impact
Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.2 and 1.12.14.5).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Geutebrueck | G-Cam Ebc-2110 Firmware | Versions 1.12.0.25, 1.12.13.2, 1.12.14.5 |
| Geutebrueck | G-Cam Ebc-2111 Firmware | Versions 1.12.0.25, 1.12.13.2, 1.12.14.5 |
| Geutebrueck | G-Cam Efd-2240 Firmware | Versions 1.12.0.25, 1.12.13.2, 1.12.14.5 |
| Geutebrueck | G-Cam Efd-2241 Firmware | Versions 1.12.0.25, 1.12.13.2, 1.12.14.5 |
| Geutebrueck | G-Cam Efd-2250 Firmware | Versions 1.12.0.25, 1.12.13.2, 1.12.14.5 |
| Geutebrueck | G-Cam Ethc-2230 Firmware | Versions 1.12.0.25, 1.12.13.2, 1.12.14.5 |
| Geutebrueck | G-Cam Ethc-2239 Firmware | Versions 1.12.0.25, 1.12.13.2, 1.12.14.5 |
| Geutebrueck | G-Cam Ethc-2240 Firmware | Versions 1.12.0.25, 1.12.13.2, 1.12.14.5 |
| Geutebrueck | G-Cam Ethc-2249 Firmware | Versions 1.12.0.25, 1.12.13.2, 1.12.14.5 |
| Geutebrueck | G-Cam Ewpc-2270 Firmware | Versions 1.12.0.25, 1.12.13.2, 1.12.14.5 |
| Geutebrueck | G-Code Eec-2400 Firmware | Versions 1.12.0.25, 1.12.13.2, 1.12.14.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-Command-Execution.html
- https://us-cert.cisa.gov/ics/advisories/icsa-20-219-03
- http://packetstormsecurity.com/files/158888/Geutebruck-testaction.cgi-Remote-Command-Execution.html
- https://us-cert.cisa.gov/ics/advisories/icsa-20-219-03