CVE-2018-19007

In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.0.25 the DDNS configuration (in the Network Configuration panel) is vulnerable to an OS system command injection as root.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-12-14

Last modified

2024-08-05

Weaknesses

CWE-78

Affected products

• G-cam/efd-2251 Firmware (Geutebrueck)
• G-cam/ewpc-2275 Firmware (Geutebrueck)

References

• http://www.securityfocus.com/bid/106208
• https://ics-cert.us-cert.gov/advisories/ICSA-18-347-03