CVE-2021-33543
Assigner: CERTVDE
Published: 2021-09-13T17:55:32
State: PUBLISHED
affected: product: E2 Series
vendor: Geutebrück
versions: status: affected
version: EBC-21xx 1.12.13.2 
status: affected
version: EBC-21xx 1.12.14.5
status: affected
version: EFD-22xx 1.12.13.2 
status: affected
version: EFD-22xx 1.12.14.5
status: affected
version: ETHC-22xx 1.12.13.2 
status: affected
version: ETHC-22xx 1.12.14.5
status: affected
version: EWPC-22xx 1.12.13.2 
status: affected
version: EWPC-22xx 1.12.14.5
lessThanOrEqual: 1.12.0.27
status: affected
version: EBC-21xx
versionType: custom
lessThanOrEqual: 1.12.0.27
status: affected
version: EFD-22xx
versionType: custom
lessThanOrEqual: 1.12.0.27
status: affected
version: ETHC-22xx
versionType: custom
lessThanOrEqual: 1.12.0.27
status: affected
version: EWPC-22xx
versionType: custom
product: Encoder G-Code
vendor: Geutebrück
versions: status: affected
version: EEC-2xx 1.12.13.2 
status: affected
version: EEC-2xx 1.12.14.5
status: affected
version: EEN-20xx 1.12.13.2 
status: affected
version: EEN-20xx 1.12.14.5
lessThanOrEqual: 1.12.0.27
status: affected
version: EEC-2xx
versionType: custom
lessThanOrEqual: 1.12.0.27
status: affected
version: EEN-20xx
versionType: custom
credits: value: Titouan Lazard and Ibrahim Ayadhi from RandoriSec reported these vulnerabilities.
descriptions: value: Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-306
description: CWE-306 Missing Authentication for Critical Function
type: CWE
source: discovery: EXTERNAL
title: UDP Technology/Geutebrück camera devices: Authentication Bypass
x_generator: engine: Vulnogram 0.0.9