Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-33523 State: PUBLISHED Published: 2022-03-30T22:06:40 Last Updated: 2024-08-03T23:50:43.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new JDBC driver that can execute arbitrary commands on the underlying host. This occurs in com.idsscheer.ppmmashup.business.jdbc.DriverUploadController. Additional Analyst Notes: - CVE Program Container: References: - https://www.softwareag.com/corporate/products/az/mashzone_nextgen/default - https://github.com/blackarrowsec/advisories/tree/master/2021/CVE-2021-33523
CVE ID: CVE-2021-33525 State: PUBLISHED Published: 2021-05-24T19:48:02 Last Updated: 2024-08-03T23:50:42.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to lilac/export.php, as demonstrated by %26%26+curl to insert an "&& curl" substring for the shell. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ArianeBlow/LilacPathVUln/blob/main/eon-pwn.sh - https://github.com/EyesOfNetworkCommunity/eonweb/releases
CVE ID: CVE-2021-33526 State: PUBLISHED Published: 2021-08-02T10:24:29.999553Z Last Updated: 2024-09-17T01:56:14.438Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: MB connect line Products: mbDIALUP Problem Types: CWE-269 Description: In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2021-017
CVE ID: CVE-2021-33527 State: PUBLISHED Published: 2021-08-02T10:24:31.012186Z Last Updated: 2024-09-16T17:42:36.084Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: MB connect line Products: mbDIALUP Problem Types: CWE-20 Description: In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/de-de/advisories/vde-2021-017
CVE ID: CVE-2021-33528 State: PUBLISHED Published: 2021-06-25T18:25:53.966348Z Last Updated: 2024-09-16T20:02:22.419Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Weidmüller Products: IE-WL(T)-BL-AP-CL-XX, IE-WL(T)-VL-AP-CL-XX Problem Types: CWE-710 Description: In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iw_console functionality. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability. Additional
er. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-026
CVE ID: CVE-2021-33529 State: PUBLISHED Published: 2021-06-25T18:25:54.843420Z Last Updated: 2024-09-16T17:52:51.853Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Weidmüller Products: IE-WL(T)-BL-AP-CL-XX, IE-WL(T)-VL-AP-CL-XX Problem Types: CWE-798 Description: In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network from or to the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-026
CVE ID: CVE-2021-33530 State: PUBLISHED Published: 2021-06-25T18:25:55.735016Z Last Updated: 2024-09-17T02:01:49.357Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Weidmüller Products: IE-WL(T)-BL-AP-CL-XX, IE-WL(T)-VL-AP-CL-XX Problem Types: CWE-78 Description: In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the devices. A specially crafted diagnostic script file can cause arbitrary busybox commands to be executed, resulting in remote control over the device. An attacker can send diagnostic while authenticated as a low privilege user to trigger
remote control over the device. An attacker can send diagnostic while authenticated as a low privilege user to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-026
CVE ID: CVE-2021-33531 State: PUBLISHED Published: 2021-06-25T18:25:56.622853Z Last Updated: 2024-09-16T23:16:36.995Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Weidmüller Products: IE-WL(T)-BL-AP-CL-XX, IE-WL(T)-VL-AP-CL-XX Problem Types: CWE-798 Description: In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. An attacker can send diagnostic scripts while authenticated as a low privilege user to trigger this vulnerability. Add
. An attacker can send diagnostic scripts while authenticated as a low privilege user to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-026
CVE ID: CVE-2021-33532 State: PUBLISHED Published: 2021-06-25T18:25:57.477465Z Last Updated: 2024-09-17T01:25:59.161Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Weidmüller Products: IE-WL(T)-BL-AP-CL-XX, IE-WL(T)-VL-AP-CL-XX Problem Types: CWE-78 Description: In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. A specially crafted diagnostic script file name can cause user input to be reflected in a subsequent iw_system call, resulting in remote control over the device. An attacker can send commands while authenticated as a low privilege user to trigger this vulnera
ntrol over the device. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-026
CVE ID: CVE-2021-33533 State: PUBLISHED Published: 2021-06-25T18:25:58.364798Z Last Updated: 2024-09-17T02:07:08.701Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Weidmüller Products: IE-WL(T)-BL-AP-CL-XX, IE-WL(T)-VL-AP-CL-XX Problem Types: CWE-78 Description: In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. A specially crafted iw_serverip parameter can cause user input to be reflected in a subsequent iw_system call, resulting in remote control over the device. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability
over the device. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-026
CVE ID: CVE-2021-33534 State: PUBLISHED Published: 2021-06-25T18:25:59.235511Z Last Updated: 2024-09-17T04:20:16.498Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Weidmüller Products: IE-WL(T)-BL-AP-CL-XX, IE-WL(T)-VL-AP-CL-XX Problem Types: CWE-78 Description: In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various requests while authenticated as a high privilege user to trigger this vulne
of the device. An attacker can send various requests while authenticated as a high privilege user to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-026
CVE ID: CVE-2021-33535 State: PUBLISHED Published: 2021-06-25T18:26:00.125539Z Last Updated: 2024-09-17T01:15:45.850Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Weidmüller Products: IE-WL(T)-BL-AP-CL-XX, IE-WL(T)-VL-AP-CL-XX Problem Types: CWE-134 Description: In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_console conio_writestr functionality. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability. Additional Analy
n attacker can send commands while authenticated as a low privilege user to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-026
CVE ID: CVE-2021-33536 State: PUBLISHED Published: 2021-06-25T18:26:01.011824Z Last Updated: 2024-09-17T03:38:31.151Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Weidmüller Products: IE-WL(T)-BL-AP-CL-XX, IE-WL(T)-VL-AP-CL-XX Problem Types: CWE-191 Description: In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exists in ServiceAgent functionality. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or out-of-bounds memory. An attacker can send this packet while unauthenticated to trigger this vulnerability. Additional Analyst Notes: - CVE Pro
n attacker can send this packet while unauthenticated to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-026
CVE ID: CVE-2021-33537 State: PUBLISHED Published: 2021-06-25T18:26:01.893809Z Last Updated: 2024-09-17T02:57:37.665Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Weidmüller Products: IE-WL(T)-BL-AP-CL-XX, IE-WL(T)-VL-AP-CL-XX Problem Types: CWE-120 Description: In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality. A specially crafted user name entry can cause an overflow of an error message buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability. Addit
xecution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-026
CVE ID: CVE-2021-33538 State: PUBLISHED Published: 2021-06-25T18:26:02.939847Z Last Updated: 2024-09-16T23:47:04.008Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Weidmüller Products: IE-WL(T)-BL-AP-CL-XX, IE-WL(T)-VL-AP-CL-XX Problem Types: CWE-269 Description: In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to
te shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-026
CVE ID: CVE-2021-33539 State: PUBLISHED Published: 2021-06-25T18:26:03.815899Z Last Updated: 2024-09-16T17:43:21.621Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Weidmüller Products: IE-WL(T)-BL-AP-CL-XX, IE-WL(T)-VL-AP-CL-XX Problem Types: CWE-287 Description: In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability. Additional Analy
of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-026
CVE ID: CVE-2021-33540 State: PUBLISHED Published: 2021-06-25T18:26:04.688706Z Last Updated: 2024-09-17T03:18:18.324Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Phoenix Contact Products: AXL F BK, IL Problem Types: CWE-798 Description: In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-021
CVE ID: CVE-2021-33541 State: PUBLISHED Published: 2021-06-25T18:26:05.564115Z Last Updated: 2024-09-16T23:21:50.885Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Phoenix Contact Products: ILC1x Problem Types: CWE-770 Description: Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of service on the PLC's network communication module. A successful attack stops all network communication. To restore the network connectivit
's network communication module. A successful attack stops all network communication. To restore the network connectivity the device needs to be restarted. The automation task is not affected. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-019
CVE ID: CVE-2021-33542 State: PUBLISHED Published: 2021-06-25T18:26:06.409806Z Last Updated: 2024-09-17T01:31:44.718Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Phoenix Contact Products: Automation Worx Software Suite Problem Types: CWE-824 Description: Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution vulnerability. Manipulated PC Worx or Config+ projects could lead to a remote code execution when unallocated memory is freed because of incompletely initialized data. The attacker needs to get access to an original bus configuration file (*.bcp) to be able to manipulate data inside. Afte
he attacker needs to get access to an original bus configuration file (*.bcp) to be able to manipulate data inside. After manipulation the attacker needs to exchange the original file by the manipulated one on the application programming workstation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities. Automated systems in operation which were programmed with one of the above-mentioned products are not affected. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-020 - https://www.zerodayinitiative.com/advisories/ZDI-21-782/
CVE ID: CVE-2021-33543 State: PUBLISHED Published: 2021-09-13T17:55:32 Last Updated: 2024-08-03T23:50:43.139Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Geutebrück Products: E2 Series, Encoder G-Code Problem Types: CWE-306 Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ - https://us-cert.cisa.gov/ics/advisories/icsa-2
https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE ID: CVE-2021-33544 State: PUBLISHED Published: 2021-09-13T17:55:33.770594Z Last Updated: 2024-09-16T17:03:56.732Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Geutebrück Products: E2 Series, Encoder G-Code Problem Types: CWE-78 Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE ID: CVE-2021-33545 State: PUBLISHED Published: 2021-09-13T17:55:35.310478Z Last Updated: 2024-09-17T01:55:45.866Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Geutebrück Products: E2 Series, Encoder G-Code Problem Types: CWE-121 Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE ID: CVE-2021-33546 State: PUBLISHED Published: 2021-09-13T17:55:36.920572Z Last Updated: 2024-09-17T04:24:10.084Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Geutebrück Products: E2 Series, Encoder G-Code Problem Types: CWE-121 Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE ID: CVE-2021-33547 State: PUBLISHED Published: 2021-09-13T17:55:38.601837Z Last Updated: 2024-09-17T02:47:47.519Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Geutebrück Products: E2 Series, Encoder G-Code Problem Types: CWE-121 Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE ID: CVE-2021-33548 State: PUBLISHED Published: 2021-09-13T17:55:40.187378Z Last Updated: 2024-09-16T19:41:35.920Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Geutebrück Products: E2 Series, Encoder G-Code Problem Types: CWE-78 Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE ID: CVE-2021-33549 State: PUBLISHED Published: 2021-09-13T17:55:41.804280Z Last Updated: 2024-09-17T00:00:56.974Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Geutebrück Products: E2 Series, Encoder G-Code Problem Types: CWE-121 Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03 - http:
dorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03 - http://packetstormsecurity.com/files/164191/Geutebruck-instantrec-Remote-Command-Execution.html
CVE ID: CVE-2021-33550 State: PUBLISHED Published: 2021-09-13T17:55:43.372471Z Last Updated: 2024-09-17T01:11:15.395Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Geutebrück Products: E2 Series, Encoder G-Code Problem Types: CWE-78 Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE ID: CVE-2021-33551 State: PUBLISHED Published: 2021-09-13T17:55:44.932289Z Last Updated: 2024-09-16T18:13:40.228Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Geutebrück Products: E2 Series, Encoder G-Code Problem Types: CWE-78 Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE ID: CVE-2021-33552 State: PUBLISHED Published: 2021-09-13T17:55:46.549577Z Last Updated: 2024-09-17T01:50:35.510Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Geutebrück Products: E2 Series, Encoder G-Code Problem Types: CWE-78 Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03
CVE ID: CVE-2021-33553 State: PUBLISHED Published: 2021-09-13T17:55:48.174522Z Last Updated: 2024-09-16T20:17:28.205Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Geutebrück Products: E2 Series, Encoder G-Code Problem Types: CWE-78 Description: Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.randorisec.fr/fr/udp-technology-ip-camera-vulnerabilities/ - https://us-cert.cisa.gov/ics/advisories/icsa-21-208-03